Gitlab branch hide button sometimes 403s

Code:
- https://git.drupalcode.org/project/drupalorg/-/blob/7.x-3.x/drupalorg/dr..., if a user can edit an issue they can click on "hide"
- And then the function https://git.drupalcode.org/project/drupalorg/-/blob/7.x-3.x/drupalorg/dr... checks for a token and proceeds.
- The link is rendered like this: https://git.drupalcode.org/project/drupalorg/-/blob/7.x-3.x/drupalorg/in...

Possible cause:
The only explanation was that the token was stale/expired and they got the 403. If they get it afterwards, that might be a caching issue on that browser. Thought they mentioned trying on different browsers, which makes it weird, as the token should be different.

Replied in slack thread to both affected users: https://drupal.slack.com/archives/CGKLP028K/p1712565892781179?thread_ts=...

so, it seems to be related to the token in the link being expired/stale.
possible workarounds:
- hard refresh
- edit the issue with something else and then try again

it’s defo a caching issue, but it’s weird that both you and Max are getting it, even on different browsers.

Can you or Max try again:
- loading https://www.drupal.org/project/drupal/issues/1383696?1 → (note the ?1)
- and then again with https://www.drupal.org/project/drupal/issues/1383696 ✨ Allow a custom HTML element to be selected for a grouping field Needs work (no ?1, just normal URL)?

I tried myself in that issue and I also get the 403, on any of the "hide" links. I always get "Invalid token". I've tried in other issues and I can "hide" without any problem, so it seems to be just this one.

So I wonder if there is some weird fastly catching issue going on. I'll wait to have @drumm's opinion on this.

I found the issue. Branches created in the fork have the character / in them. I tried in the visible branch that didn’t have it and it worked.

This is now ready to test.

MR:
Test URL: https://fjgarlin-drupal.dev.devdrupal.org/project/config_notify/issues/3...

fjgarlin → changed the visibility of the branch 3439341-gitlab-branch-hide to hidden.

Good catch, deployed.

Nice work! Confirming I can hide those branches on that issue now :)

Automatically closed - issue fixed for 2 weeks with no activity.