Suresh - ELMO - Hi Team. We have an embedded ap...

Hi Team. We have an embedded app with trusted authentication enabled - TrustedAuthTokenCookieless. We are provisioning user using JIT, and RBAC is enabled and properly configured. User has attached to a Group "Group 1" which has role "Role 1" which contains privilege "Can use Sage". But I am still getting 403 when I ask a question from search bar. The error message is "AxiosError: Request failed with status code 403" and fun part is we don't use axios on our FE SPA. We can run a report on that model but sage search is not working. Can someone help us on this?
8 Replies
yuichirio_ha
yuichirio_ha2w ago
hey I think you followed all this : https://developers.thoughtspot.com/docs/just-in-time-provisioning#_jit_provisioning_and_authentication_token_generation_via_rest_apis For the JIT provisioning. Next are you trying this locally ? And loading some resource hosted locally that might give 403 for overall page when embedding this. So, the error happens when you are doing search embed ? or sage embed? Can you put some more details regarding this? And the error console logs what it says. Thanks
Suresh - ELMO
Suresh - ELMOOP2w ago
We are using AppEmbed , modularHomeExperience: true, homePageSearchBarMode: "aiAnswer". They can see the AI search, can type the question but as soon as they hit enter, 403 will appear. We have deployed this on staging.
No description
No description
No description
No description
No description
Suresh - ELMO
Suresh - ELMOOP2w ago
No description
yuichirio_ha
yuichirio_ha2w ago
Hey cool - I hope you are doing proper provisioning while getting the token for embed. Can you put the code for the init and token call. What things you are passing.
shikharTS
shikharTS2w ago
@Suresh - ELMO the axios error is probably from TS. Do we have any api call which is giving 403? I think some initial call chekcing permissions gives 403 and then all the calls fail. Can you check if this user can use spotter on TS as well?
Suresh - ELMO
Suresh - ELMOOP2w ago
This is what I got from our FE team. And I logged-in as that user in direct TS UI (not from embedded), this user is able to use Sage Search. Only embedded part is not working. I have attached little bit info around FE init. We tested both Trusted authentication as well NoAuth flow, same result and not able to ask AI question.
shikharTS
shikharTS2w ago
I think this is a bug we are already investigating. Let me confirm and get back if this is known or if already fixed
Suresh - ELMO
Suresh - ELMOOP2w ago
Thank you and let us know about the outcome. Meanwhile,I have created a support ticket #00406676 with the above detail .

Did you find this page helpful?