Website 5XX on `/api/v1/deliver-apple-csr`

[BCTBB]

Fleet version: N/A

Web browser and operating system: N/A

---

💥  Actual behavior

#help-p1 received a 5XX alert for /api/v1/deliver-apple-csr?deliveryMethod=json when the server response body was a 429.

Dec 05 11:18:21 AM   at=info method=POST path="/api/v1/deliver-apple-csr?deliveryMethod=json" host=fleetdm.com request_id=<redacted> fwd="<redacted>" dyno=web.2 connect=0ms service=255ms status=500 bytes=21 protocol=http2.0 tls=true tls_version=tls1.3
Dec 05 11:18:21 AM   error: Sending 500 ("Server Error") response:
Dec 05 11:18:21 AM    Error: Internal error occurred while running this action:  `post` failed ("non200Response").  A non-2xx status code was returned from the server.
Dec 05 11:18:21 AM   Server response:
Dec 05 11:18:21 AM   {
Dec 05 11:18:21 AM     statusCode: 429,
Dec 05 11:18:21 AM     headers: {
Dec 05 11:18:21 AM       date: 'Fri, 05 Dec 2025 16:18:21 GMT',
...
Dec 05 11:18:21 AM     },
Dec 05 11:18:21 AM     body: '{"retry_after":1,"ok":false,"error":"rate_limited"}'
Dec 05 11:18:21 AM   }
Dec 05 11:18:21 AM       at Object.fn (/app/api/controllers/deliver-apple-csr.js:167:30)
Dec 05 11:18:21 AM       at process.processTicksAndRejections (node:internal/process/task_queues:95:5)
Dec 05 11:18:21 AM   <- POST /api/v1/deliver-apple-csr             (253ms 500)
Dec 05 11:18:21 AM    |  error

🛠️ To fix

Treat future rate_limited occurrences as a 4XX instead of a 5XX.

🧑‍💻  Steps to reproduce

Unknown

🕯️ More info (optional)

1. Link to 🔔

[eashaw]

Closed by #36788

I updated that endpoint to log a warning and continue if the request to the Slack webhook fails.