Hello,

I successfully deployed the sample Express.js app from the Okta quickstart, using a test developer Okta account. I run the app on a container on localhost, and everything works fine and as expected.

However, when I deploy this to AWS ECS behind an ALB, it doesn't work, even though the code being deployed is identical. One of two things happen when trying to hit the Okta protected route:

1. The request times out, and a 504 Gateway timeout is thrown by the AWS ALB.
2. I get a 403 error from the application.

In the application logs, though, I can see that the application has received the callback code and state from Okta.

Does anyone have any clues as to where the issue might be? Is the likely culprit the App Integration and/or security policies in the org Okta tenant?