Skip to content

[ENG-10377] Prevent 403 from metadata URLs from navigating users away#896

Merged
adlius merged 1 commit intoCenterForOpenScience:hotfix/26.3.1from
futa-ikeda:hotfix/vol-redirect
Feb 25, 2026
Merged

[ENG-10377] Prevent 403 from metadata URLs from navigating users away#896
adlius merged 1 commit intoCenterForOpenScience:hotfix/26.3.1from
futa-ikeda:hotfix/vol-redirect

Conversation

@futa-ikeda
Copy link
Contributor

@futa-ikeda futa-ikeda commented Feb 25, 2026

  • Ticket: [ENG-10377]
  • Feature flag: n/a

Purpose

  • Prevent 403 error from /metadata/:id requests navigating users away

Summary of Changes

  • Add new regex to error interceptor
  • Add new custom request header to indicate requests that shouldn't trigger an auth redirect

Screenshot(s)

Side Effects

QA Notes

if (error.status === 403) {
const requestAccessRegex = /\/v2\/nodes\/[^/]+\/requests\/?$/i;
if (error.url && requestAccessRegex.test(error.url)) {
const metadataRegex = /\/metadata\/[^/]+\/?$/i;
Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This regex feels a little fragile/hamfisted...

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Updated to use some custom request header instead

@futa-ikeda futa-ikeda changed the title [ENG-10377] Prevent 403 from metadata URLs from navigating user… [ENG-10377] Prevent 403 from metadata URLs from navigating users away Feb 25, 2026
brianjgeiger
brianjgeiger previously approved these changes Feb 25, 2026
@futa-ikeda futa-ikeda changed the base branch from main to hotfix/26.3.1 February 25, 2026 20:58
@futa-ikeda futa-ikeda dismissed brianjgeiger’s stale review February 25, 2026 20:58

The base branch was changed.

@adlius adlius merged commit 2ea743a into CenterForOpenScience:hotfix/26.3.1 Feb 25, 2026
2 of 3 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants