HTTP Error 403: Forbidden

Sort:
Avatar of ImperfectAge

It looks like something's changed with the public API, or perhaps I've been blacklisted  !??

When making club and country requests, I get a 403 Forbidden response.

Is it something about the HTTP header I'm sending?  This hasn't changed for a while, and it includes my email and chess.com username..  But is there a specific preferred format for these fields in the header?  It looks like I can make similar requests via curl, where the header is not specified.

 

Avatar of Tricky_Dicky

Did you see the comment by Ben from last weekend about a user who was overloading the server?

Think it might be connected. We are all being throttled because of it.

Avatar of stephen_33

"a user who was overloading the server" - that's happened before & the user was blocked if I remember. But I wouldn't have thought an event from a week ago would still be causing general problems for other users?

I haven't had any problems recently but I keep my endpoint requests to an absolute minimum.

Avatar of Tricky_Dicky

It is still having an effect. It doesn't seem to apply to all end points but after a time a restriction is placed on your account and no further uploads are allowed for approximately 1 hour.

Seems to effect the player stats end point more than any other.

 

Avatar of stephen_33

'the player stats end point' - that's interesting but I tend not to make many of those requests which might explain why I haven't been affected by this problem.

If I remember the previous incident, a member was said to be trying to download what seemed to be the stats for every single member on the site, which is quite a load on the servers!

Avatar of Samuel_Panc

I tried to get a list of members for a club and I too got Error 403: Forbidden.

Avatar of bokacm
Tricky_Dicky wrote:

Did you see the comment by Ben from last weekend about a user who was overloading the server?

Think it might be connected. We are all being throttled because of it.

Can you give me a link to that comment?

Avatar of Tricky_Dicky

8 days ago in notes

Avatar of Nevfy
ImperfectAge wrote:

But is there a specific preferred format for these fields in the header?

I never saw such information on the forum, however I also asked about it once about a year ago. I think any format is fine, because (I assume) person will be manually checked, if causes troubles. However, if there is any desirable format, let me know as well.

As for me, I never got such error.

Avatar of Tricky_Dicky

This is the header I send immediately before a .send & .responseText

.setRequestHeader "User-Agent", ModName & ", username: Tricky_Dicky; contact: my e-mail address"

Avatar of davidFreelance
Tricky_Dicky escribió:

This is the header I send immediately before a .send & .responseText

.setRequestHeader "User-Agent", ModName & ", username: Tricky_Dicky; contact: my e-mail address"

Please, what do you mean by ModName in "User-Agent" tag?

Avatar of Tricky_Dicky

I include my subroutine name in the header. It's part of the literal string. If they do contact me I know which module they are referencing.

Avatar of davidFreelance
Tricky_Dicky escribió:

I include my subroutine name in the header. It's part of the literal string. If they do contact me I know which module they are referencing.

I get the error Refused to set unsafe header "User-Agent". Maybe this is connected with the chase by Chesscom of the user overloading the server you mentioned before.