Send a request from an iframe is receiving a 401

[marc]

@MartinCassidy Please have a look here: Action required: Atlassian Connect vulnerability allows bypass of app qsh verification via context JWTs . It seems like you need to change your authorization check.