CH-273 access denied mitigation: auto hard reload once

filippomc · filippomc · commit 238144480cfe · 2026-05-21T11:52:55.000+02:00
diff --git a/deployment-configuration/helm/templates/auto-gatekeepers.yaml b/deployment-configuration/helm/templates/auto-gatekeepers.yaml
@@ -69,9 +69,8 @@ data:
     <head>
       <meta charset="UTF-8">
       <title>403 - Access Forbidden</title>
-      <link rel="stylesheet" type="text/css" href="https://maxcdn.bootstrapcdn.com/bootstrap/3.3.6/css/bootstrap.min.css">
-      <script src="https://code.jquery.com/jquery-1.11.3.min.js"></script>
-      <script src="https://maxcdn.bootstrapcdn.com/bootstrap/3.3.6/js/bootstrap.min.js"></script>
+      <link rel="stylesheet" type="text/css" href="https://cdn.jsdelivr.net/npm/bootstrap@5.3.3/dist/css/bootstrap.min.css">
+      <script src="https://cdn.jsdelivr.net/npm/bootstrap@5.3.3/dist/js/bootstrap.bundle.min.js"></script>
       <style>
         .oops {
           font-size: 9em;
@@ -80,23 +79,39 @@ data:
         .message {
           font-size: 3em;
         }
+        .error-template {
+          display: none;
+        }
       </style>
     </head>
     <body>
       <div class="container text-center">
         <div class="row vcenter" style="margin-top: 20%;">
           <div class="col-md-12">
-            <div class="error-template">
+            <div class="error-template" id="error-template">
               <h1 class="oops">Oops!</h1>
               <h2 class="message">403 Permission Denied</h2>
               <div class="error-details">
                 Sorry, you do not have access to this page, please contact your administrator.
-                If you are authorized to see this page, please try <a href="/">reload</a> or <a href="/oauth/logout?redirect=/">login again</a>.
+                If you are authorized to see this page, please try <a href="/">reload</a>
+                or <a href="/oauth/logout?redirect=/">login again</a>.
               </div>
             </div>
           </div>
         </div>
-    </div>
+      </div>
+      <script>
+        var retryKey = 'gk_403_retry';
+        var retryCount = parseInt(sessionStorage.getItem(retryKey) || '0', 10);
+
+        if (retryCount < 1) {
+          sessionStorage.setItem(retryKey, String(retryCount + 1));
+          window.location.replace('/');
+        } else {
+          sessionStorage.removeItem(retryKey);
+          document.getElementById('error-template').style.display = 'block';
+        }
+      </script>
     </body>
     </html>
 ---
