Petoberfest - Uploaded but no change

[thecodester]

I uploaded a picture for Petoberfest but I do not see it anywhere and it still says be the first.

I made the event draft again so it is not visible Petoberfest

[jung-thomas]

The images have to be approved before they show up.

[thecodester]

Lets say I approve, can I delete them later?

[thecodester]

And I don't see any uploads here, in the screenshot you posted. I'm pretty sure I uploaded.

Do I have to indicate that Petoberfest is running, perhaps by creating activity and attaching Petoberfest to it, and then making that Confirmed?

Currently it is draft again since I wanted to test and not expose the activity yet

[thecodester]

Also when I uploaded, it did not give any response that I was successful.

[jung-thomas]

Lets say I approve, can I delete them later?

Yes

And I don't see any uploads here, in the screenshot you posted. I'm pretty sure I uploaded.
But you said:
I made the event draft again so it is not visible Petoberfest
Maybe it's best if you test in DEV.

[thecodester]

Will do

[jung-thomas]

Tested in DEV just now - https://tutorial-system-dev-tutorials-approuter.cfapps.eu10-005.hana.ondemand.com/petoberfest/petoberfest-2026/

[thecodester]

I can't use this UI got this response

ALso, even if this will work, the prod one wasn't working for me.

[thecodester]

I wasn't logged in. We should have some message to remind people to log in

[thecodester]

OK, I was now able to upload and approve and see the approved one in the slide viewer.

1. Is the slide viewer randomized?
2. What about prod? I cannot get it to work there, and I have set the activity to Confirmed

[jung-thomas]

Confirmed that the CDN is blocking us in PROD. It works from the direct URL without the developers.sap.com vanity. Will have to request SAP IT to stop blocking it.

Slide Viewer is sequential.

[jung-thomas]

Most fixes are in but CDS is still blocking developers.sap.com. I can confirm it works from https://tutorial-system-prod-tutorials-approuter.cfapps.eu10-005.hana.ondemand.com/

[jung-thomas]

Details from Jira ticket to CDN team:

Evidence / reproduction (no auth needed — the block happens at the edge; unauthenticated requests that are under the limit pass through to origin and get a normal 401):

• POST https://developers.sap.com/petoberfest-api/petoberfest-2026/upload, Content-Type: application/json
  • 16 KB body → HTTP 401 (reaches origin ✅)
  • 32 KB body → HTTP 403, Server: AkamaiGHost, Content-Type: text/html, body: Access Denied … Reference fix(fetch-tutorials): REST API fallback when GraphQL is down #18.b20c2e17.1787178966.8c…
  • So the cutoff sits between 16 KB and 32 KB (~16 KB).
• The same POST to the origin approuter https://tutorial-system-prod-tutorials-approuter.cfapps.eu10-005.hana.ondemand.com/petoberfest-api/petoberfest-2026/upload accepts a 13 MB body (returns 401 auth, i.e. it reached origin). → the limit is imposed at the Akamai edge, not origin.
• Akamai reference # for the block (to locate the exact rule in your logs): 18.b20c2e17.1787178966.8c. This looks like a Kona/WAF request-body-size rule.

Request: Raise the max request-body size (or add a rule exception) so image uploads reach origin. The origin accepts up to a 16 MB JSON body (10 MB image, base64-inflated ~1.33×), so please allow request bodies up to at least 16 MB on these POST endpoints:

• POST /petoberfest-api/*/upload — Petoberfest pet-photo upload
• POST /admin/advocates/*/photo — Advocate photo upload

Scoping the exception to POST on those two path prefixes is fine (doesn't need to be site-wide).