Server responding "Error: The remote server returned an error: (403) Forbidden.. Retrying in 60 seconds" when deploying.

[hanusatv]

I've set up a continous deployment to a Sandbox environment and the workflow runs perfectly, until it get to the deployment step:

And eventually it fails.
Version 27.0.8.0 was installed before the run, and I'm trying to install version 27.0.9.0

However! If I then open the environment that I was trying to deploy to, it show me that the app actually is installed sucessfully

How does this work? How come the worflow gets a "forbidden" error from the BC environment, but it ends up installing the app anyways?

[mazhelez]

As far I can see from the logs, the error is when calling Get extensionDeploymentStatus, that's after the extension was already uploaded.

How was the authentication to the sandbox environment created?

I suppose a re-run would fix the issue.

[hanusatv]

I've already tried running it multiple times, both as a new CI/CD flow and a re-run of the failed tasks.
The result is the same each time.
The Workflow gets a forbidden response and fails, but the app in BC is upgraded anyways.

My Al-Go-pte app runs with a S2S setup where the workflow uses a AUTHCONTEXT seceret in a github environment to deploy to the customertest tenant at the customer's.

The publishing app is an app registered in my workplace's Entra (we are a CSP provider) and it's setup as a cross tenant app.

It has full access and concent given in my own tenant:

I've then registered the entra app in the customer's BC admin page and in the BC environment.

And in the Customer's tenant, it's been activated and granted concent:

[hanusatv]

I can add that before the deployment runs, the list shows ver 27.0.10.0 installed

And after the workflow fails on the forbidden responses it show ver 27.0.11.0 installed