We have a Forge app which is displayed on the JSM portal issue, in panel and panel-detail module. Our app use Custom UI (and require Forge bridge in our frontend).
Since today, our app can’t load on some instance due to an HTTP400 when calling {instance}.atlassian.net/rest/servicedesk/1/customer/servicedesk-data/forge/context-token with the following response:
{"errors":[{"errorMessage":"The request body is invalid."}],"reasonKey":"sd.api.error.bad.request","reasonCode":"400"}
So if I read your analysis correctly, this isn’t actually ‘solved’, rather uncovered a fundamental and potentially super nasty problem with Forge permissions not being properly applied to moved issues? That would certainly warrant a high priority FRGE issue in case?