Internal server error instead of 403 Forbidden

Here is the check in compose-endpoint.js
image