Skip to content

FOUR-26457: Fix webentry nested screen 403 by always sending auth params on screen fetch#1892

Open
eiresendez wants to merge 1 commit intodevelopfrom
bugfix/FOUR-26457
Open

FOUR-26457: Fix webentry nested screen 403 by always sending auth params on screen fetch#1892
eiresendez wants to merge 1 commit intodevelopfrom
bugfix/FOUR-26457

Conversation

@eiresendez
Copy link
Contributor

@eiresendez eiresendez commented Feb 5, 2026

Issue & Reproduction Steps

Nested screens inside “completed” screens for anonymous web entry trigger a request like:
GET /api/1.0/webentry/{process}/{node}/screens/{id} without request_id, resulting in a 403 (authorization) even though the request and task are valid.

  1. Import the provided process and start it via anonymous web entry.
  2. Complete the task that shows a “completed screen” containing a nested screen.
  3. Observe a 403 on the nested screen request.

Solution

  • Ensure screen-builder appends authParams (including request_id) when fetching screens so nested screens are loaded with proper webentry context.
  • Updated DataProvider.getScreen() to append authQueryString() if it’s missing request_id.

How to Test

Test the steps above

Related Tickets & Packages

ci:deploy

@cypress
Copy link

cypress bot commented Feb 5, 2026

screen-builder    Run #2196

Run Properties:  status check passed Passed #2196  •  git commit 346b6cb687: FOUR-26457: Fix webentry nested screen 403 by always sending auth params on scre...
Project screen-builder
Branch Review bugfix/FOUR-26457
Run status status check passed Passed #2196
Run duration 09m 42s
Commit git commit 346b6cb687: FOUR-26457: Fix webentry nested screen 403 by always sending auth params on scre...
Committer Eleazar Resendez
View all properties for this run ↗︎

Test results
Tests that failed  Failures 0
Tests that were flaky  Flaky 0
Tests that did not run due to a developer annotating a test with .skip  Pending 19
Tests that did not run due to a failure in a mocha hook  Skipped 0
Tests that passed  Passing 389
View all changes introduced in this branch ↗︎

@processmaker-sonarqube
Copy link

@vladyrichter
Copy link

QA server K8S was successfully deployed https://ci-164da9c369.engk8s.processmaker.net

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants