BeatMods api returns 403 forbidden, but user is able to load url in browser

bsmg / BeatSaberModInstaller

Automatically installs Beat Saber mods with a single click

218 stars 52 forks source link

BeatMods api returns 403 forbidden, but user is able to load url in browser #12

Open megalon opened 5 years ago

megalon commented 5 years ago

Discord user Mr. Kustogg's Bizarre Adventure#0458 is unable to connect to the BeatMods API, returning error 403 (Forbidden) I sent them a debug build that adds more info to the error message.

However, the user is able to access the URL in browser. https://beatmods.com/api/v1/mod?status=approved

The user states that their firewall is disabled, and they have no anti-virus. Anyone have any ideas on this?

It has to be an anti-virus thing, right?

raftario commented 5 years ago

Maybe try to give him a custom build with the user agent from Chrome or Firefox to see if it fixes the issue ? I'm currently working on implementing support for mirrors, so that might help too.

Edit : Maybe a Cloudflare issue ?

megalon commented 5 years ago

I just gave someone having this issue a custom build with the user agent set to Firefox and it did not fix the problem.

megalon commented 5 years ago

Update: Cloudflare is likely the cause of this issue. For at least one user, they were getting this error, and also unable to reach many sites without entering a captcha due to Cloudflare's DDOS protection. Apparently this was caused by an incorrectly configured VR Chat server, which made the user's traffic appear as a DDOS attack to Cloudflare's servers.

See this writeup https://medium.com/@vrchat/vrchat-downtime-post-mortem-3b956fee8c3e

The user was able to access the BeatMods API the next day.