403/forbidden with heroku-hosted connect add-on after sessions expire in Jira On-Demand?

[Michael Kitchin]

Hi there,

Our heroku-hosted connect add-on works exactly the way we want until (we think) the client session expires, then starts kicking back 403/forbidden in the iframe requests.

We thought this might be token expiry so have set ac.token.expiry.secs in application.conf to a very large value with no improvements.

Recap:

• Set up dev environment (IntelliJ)
• Created the app with ac-play-java 0.10, Play 2.2.6, and Java 8
• Added descriptor, routes, views, controllers, etc.
• Added modules for UI links (mostly jiraProjectTabPanels)
• Added everything to GitHub and Heroku for turnkey deployment
• Added my addon to my dev Jira successfully
• Added it to our OnDemand instance via private Marketplace registration, etc.
• All runs _perfectly_, until some time has passed (see above)

Other details:

• Using H2 database (during evaluation) with the appropriate hibernate dialect, etc. (noting AC_HOST-related errors, below)
• Using a "hobbyist"-level dyno (no sleeping)

Here is a section of the log when a user logs back in and tries to reach some of our pages.

2015-11-30T23:15:13.218898+00:00 heroku[router]: at=info method=GET 
path="/planner/admin?project_key=((project-omitted))&tz=America%2FDenver&loc=en-US&user_id=((username-omitted))&user_key=((username-omitted))&xdm_e=https%3A%2F%2F((on-demand-domain-omitted)).atlassian.net&xdm_c=channel-((app-url-omitted))-a&cp=&lic=none&cv=1.1.64&jwt=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJzdWIiOiJta2l0Y2hpbiIsInFzaCI6ImRiOWE4NDMwYWIzMjhmNGI1ZjBmYTcwMWRmNjVmMTk1ZTRjN2ZiNDczZjM0Y2Q2YzJkNjQzMjA3NzBhODU1OWYiLCJpc3MiOiJqaXJhOmM2Nzc3MjI4LTIxYmQtNDVlMy1iZGQxLWE0MGY4Zjg5ZTBhNSIsImNvbnRleHQiOnsidXNlciI6eyJ1c2VyS2V5IjoibWtpdGNoaW4iLCJ1c2VybmFtZSI6Im1raXRjaGluIiwiZGlzcGxheU5hbWUiOiJNaWNoYWVsIEouIEtpdGNoaW4ifX0sImV4cCI6MTQ0ODkyNTQ5MSwiaWF0IjoxNDQ4OTI1MzExfQ.Wyym7X5ZMRnmqRjfzdDWfJnEgBEfIMmVAmuXxJCSQs4"
 host=((heroku-domain-omitted)).herokuapp.com request_id=0855d525-ad86-4f65-8adf-4e8e884a68a6 fwd="50.170.226.183" dyno=web.1 connect=1ms service=33ms status=403 bytes=257
2015-11-30T23:15:13.205640+00:00
 app[web.1]: [[31merror[0m] o.h.e.j.s.SqlExceptionHelper - Table 
"AC_HOST" not found; SQL statement:
2015-11-30T23:15:13.681840+00:00 
heroku[router]: at=info method=GET 
path="/planner/capacity?project_key=((project-omitted))&tz=America%2FDenver&loc=en-US&user_id=((username-omitted))&user_key=((username-omitted))&xdm_e=https%3A%2F%2F((on-demand-domain-omitted)).atlassian.net&xdm_c=channel-((app-url-omitted))-a&cp=&lic=none&cv=1.1.64&jwt=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJzdWIiOiJta2l0Y2hpbiIsInFzaCI6ImMyZjFjZjNmOWMxYWJiMGY3YTAxYzQyMTg2YjRmNDA0MWU5NDJjYjYzNzFjMTYxMTRjOTdlNTNhZDU4YzVmY2EiLCJpc3MiOiJqaXJhOmM2Nzc3MjI4LTIxYmQtNDVlMy1iZGQxLWE0MGY4Zjg5ZTBhNSIsImNvbnRleHQiOnsidXNlciI6eyJ1c2VyS2V5IjoibWtpdGNoaW4iLCJ1c2VybmFtZSI6Im1raXRjaGluIiwiZGlzcGxheU5hbWUiOiJNaWNoYWVsIEouIEtpdGNoaW4ifX0sImV4cCI6MTQ0ODkyNTQ5MCwiaWF0IjoxNDQ4OTI1MzEwfQ.Ghpgg_WoYR_QH7qoUYHL_6ONDfrZnacSV1kMTSAFujA"
 host=((heroku-domain-omitted)).herokuapp.com request_id=8105d435-c702-4362-8623-1022e9ba36f9 fwd="50.170.226.183" dyno=web.1 connect=0ms service=28ms status=403 bytes=257
2015-11-30T23:15:13.667829+00:00
 app[web.1]: [[31merror[0m] o.h.e.j.s.SqlExceptionHelper - Table 
"AC_HOST" not found; SQL statement:
2015-11-30T23:15:15.038005+00:00 
heroku[router]: at=info method=GET 
path="/planner/run?project_key=((project-omitted))&tz=America%2FDenver&loc=en-US&user_id=((username-omitted))&user_key=((username-omitted))&xdm_e=https%3A%2F%2F((on-demand-domain-omitted)).atlassian.net&xdm_c=channel-((app-url-omitted))-a&cp=&lic=none&cv=1.1.64&jwt=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJzdWIiOiJta2l0Y2hpbiIsInFzaCI6IjkyZDM3ZjU5N2ZkZDMwNTA1MTkyZTU1OGFiNjQ0ZTVmZDQ1YjU1NzAwMGU2YTFjOGQxYzNlNzU3MDI1NjNmZWMiLCJpc3MiOiJqaXJhOmM2Nzc3MjI4LTIxYmQtNDVlMy1iZGQxLWE0MGY4Zjg5ZTBhNSIsImNvbnRleHQiOnsidXNlciI6eyJ1c2VyS2V5IjoibWtpdGNoaW4iLCJ1c2VybmFtZSI6Im1raXRjaGluIiwiZGlzcGxheU5hbWUiOiJNaWNoYWVsIEouIEtpdGNoaW4ifX0sImV4cCI6MTQ0ODkyNTQ4OSwiaWF0IjoxNDQ4OTI1MzA5fQ.v8SR0DhMIy5jyc7IZOt_A4Ff0OTaSHcI0Ch75eJl3Sc"
 host=((heroku-domain-omitted)).herokuapp.com request_id=0f3344f8-44b9-43dd-bc4b-98b2137fb758 fwd="50.170.226.183" dyno=web.1 connect=1ms service=58ms status=403 bytes=257
2015-11-30T23:15:15.020889+00:00
 app[web.1]: [[31merror[0m] o.h.e.j.s.SqlExceptionHelper - Table 
"AC_HOST" not found; SQL statement:
2015-11-30T23:16:01.421412+00:00 
heroku[router]: at=info method=GET path="/atlassian-connect.json" 
host=((heroku-domain-omitted)).herokuapp.com request_id=d24bf9f6-f1c2-4420-b241-87191e6114ce fwd="54.85.255.242" dyno=web.1 connect=15ms service=76ms status=200 bytes=1450
2015-11-30T23:16:03.522417+00:00
 heroku[router]: at=info method=GET path="/atlassian-connect.json" 
host=((heroku-domain-omitted)).herokuapp.com request_id=d59de75e-5954-4efe-a45b-96c23dceb5d4 fwd="54.85.255.242" dyno=web.1 connect=1ms service=40ms status=200 bytes=1450

Please let me know if I may provide any additional information. Thanks!

-Regards,
MjK

[seb · Accepted solution]

Answered here: https://groups.google.com/d/msg/atlassian-connect-dev/j5DLhbQaoPU/6j0k8WZlBQAJ

[Michael Kitchin]

Neglected to include the response body for that 403/forbidden, described above:

Access to this resource is forbidden without successful authentication. Please supply valid credentials.