Liveboard embed won't load, shows a 403
Hello! We are working on a new product and I'm trying to embed a liveboard in it. In our other product we have this working but in the new product the embed widget shows a 403 forbidden error.
A few differences:
1. We are now using sub-organizations
2. The old product is in PHP and makes API calls through Guzzle, with the liveboard embedded using vanilla Javascript
3. The new platform is in NextJS (React) with the backend in NestJS, with the liveboard embedded using components
What does work:
1. All the backend API calls work
2. I can create users with auto_create=true
3. Users do show up in the sub organization
4. User groups do show up in the sub organization
5. The session callback works and returns a token
6. The call to our workspace /callosum/v1/session/isactive does not produce any errors
What doesn't work:
[domainredacted]/?embedApp=true&hostAppUrl=local-host&viewPortHeight=327&viewPortWidth=1512&sdkVersion=1.41.0&authType=AuthServerCookieless&blockNonEmbedFullAppAccess=true&cookieless=true&hideAction=[%22reportError%22,%22addToFavorites%22,%22makeACopy%22,%22renameModalTitleDescription%22,%22saveAsView%22,%22createLiveboard%22,%22AskAi%22,%22edit%22,%22pin%22,%22createMonitor%22,%22schedule-list%22,%22subscription%22,%22manageMonitor%22,%22showUnderlyingData%22]&preAuthCache=true&overrideConsoleLogs=true&clientLogLevel=ERROR&isLiveboardEmbed=true&isLiveboardHeaderSticky=true&isLiveboardHeaderV2Enabled=false&showLiveboardVerifiedBadge=true&showLiveboardReverifyBanner=true&hideIrrelevantFiltersAtTabLevel=false&enableDataPanelV2=true&enableCustomColumnGroups=false&arePdfCoverFilterPageCheckboxesEnabled=false&isLiveboardXLSXCSVDownloadEnabled=false#/embed/viz/2af65637-d302-4569-847f-4fd53f89f133
That call produces a 403. The new domain is added to all the security settings boxes. Nothing else was changed at the primary org level. Does anyone know what else I can check to diagnose why I'm getting a 403 from that call?
A few differences:
1. We are now using sub-organizations
2. The old product is in PHP and makes API calls through Guzzle, with the liveboard embedded using vanilla Javascript
3. The new platform is in NextJS (React) with the backend in NestJS, with the liveboard embedded using components
What does work:
1. All the backend API calls work
2. I can create users with auto_create=true
3. Users do show up in the sub organization
4. User groups do show up in the sub organization
5. The session callback works and returns a token
6. The call to our workspace /callosum/v1/session/isactive does not produce any errors
What doesn't work:
[domainredacted]/?embedApp=true&hostAppUrl=local-host&viewPortHeight=327&viewPortWidth=1512&sdkVersion=1.41.0&authType=AuthServerCookieless&blockNonEmbedFullAppAccess=true&cookieless=true&hideAction=[%22reportError%22,%22addToFavorites%22,%22makeACopy%22,%22renameModalTitleDescription%22,%22saveAsView%22,%22createLiveboard%22,%22AskAi%22,%22edit%22,%22pin%22,%22createMonitor%22,%22schedule-list%22,%22subscription%22,%22manageMonitor%22,%22showUnderlyingData%22]&preAuthCache=true&overrideConsoleLogs=true&clientLogLevel=ERROR&isLiveboardEmbed=true&isLiveboardHeaderSticky=true&isLiveboardHeaderV2Enabled=false&showLiveboardVerifiedBadge=true&showLiveboardReverifyBanner=true&hideIrrelevantFiltersAtTabLevel=false&enableDataPanelV2=true&enableCustomColumnGroups=false&arePdfCoverFilterPageCheckboxesEnabled=false&isLiveboardXLSXCSVDownloadEnabled=false#/embed/viz/2af65637-d302-4569-847f-4fd53f89f133
That call produces a 403. The new domain is added to all the security settings boxes. Nothing else was changed at the primary org level. Does anyone know what else I can check to diagnose why I'm getting a 403 from that call?
