Getting internal server error instead of Forbidden

Here’s the check in compose-endpoint.js
image