mojira.dev
WEB-4494

Access Denied Bug

Mojang Studios Note

This issue seems to be caused when you make a request towards our website without the User-Agent header being set in the request. If you use curl you can work around this problem by manually adding the header:

curl 'https://www.minecraft.net/en-us' -H 'User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/98.0.4758.102 Safari/537.36'

I found this bug and i fixed it.
This is not a bug it's just a common issue

*Fix:
1. Go to your browser settings and search for cookies
2. There will be "Clear browsing data" (If you are using firefox it will say "Cookies and site data")
3. Press on it and select you time range, then press "Clear data"*

It will be fixed.

Linked issues

MC-226128 Minecraft.net is denying my access Resolved MC-227094 Can't go to Minecraft.net Resolved MC-263779 Access Denied Resolved MCL-20435 Acces Denied Resolved WEB-4513 You don't have permission to access Resolved

Attachments

Comments 20

Fix:
1. Go to your browser settings and search for cookies
2. There will be "Clear browsing data" (If you are using firefox it will say "Cookies and site data")
3. Press on it and select you time range, then press "Clear data"

I have found that in some cases the issue eventually resolves on its own, no need to clear any data

It's not actually a fix, it's a workaround. This is indeed a valid bug.

Clearing cookies makes no diffrence for me. Same problem

Some time ago, I could access articles from direct links, such as from reddit when new snapshots are out, but these even don't work now.
Also it's the same problem whether I use Chrome or Edge.
I have also dissabled all plugins/addons/add-blockers etc from Chrome, no diffrence.
Even accessed the site from various networks, no diffrence either.

A weird behaviour I noticed previously were the fronpage continously reloading on its own for some time untill it gave the "Access Denied" message.
And weird enough, the reference number continued to change multiple times a second.

There is clearly something bugged with the website.

If you are using Curl or powershell to try and access the website via commandline (so you can script upgrades ) this solution fails as well

An access denied error is thrown directly.

PS /home/mc> curl -v "https://www.minecraft.net/"
*   Trying 23.55.58.97:443...
* Connected to www.minecraft.net (23.55.58.97) port 443 (#0)
* ALPN, offering h2
* ALPN, offering http/1.1
* successfully set certificate verify locations:
*  CAfile: /etc/ssl/certs/ca-certificates.crt
*  CApath: /etc/ssl/certs
* TLSv1.3 (OUT), TLS handshake, Client hello (1):
* TLSv1.3 (IN), TLS handshake, Server hello (2):
* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):
* TLSv1.3 (IN), TLS handshake, Certificate (11):
* TLSv1.3 (IN), TLS handshake, CERT verify (15):
* TLSv1.3 (IN), TLS handshake, Finished (20):
* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):
* TLSv1.3 (OUT), TLS handshake, Finished (20):
* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384
* ALPN, server accepted to use h2
* Server certificate:
*  subject: CN=*.minecraft.net
*  start date: Sep  7 00:00:00 2021 GMT
*  expire date: Sep  6 23:59:59 2022 GMT
*  subjectAltName: host "www.minecraft.net" matched cert's "*.minecraft.net"
*  issuer: C=US; O=DigiCert Inc; CN=RapidSSL TLS DV RSA Mixed SHA256 2020 CA-1
*  SSL certificate verify ok.
* Using HTTP2, server supports multi-use
* Connection state changed (HTTP/2 confirmed)
* Copying HTTP/2 data in stream buffer to connection buffer after upgrade: len=0
* Using Stream ID: 1 (easy handle 0x55c0e263b7b0)
> GET / HTTP/2
> Host: www.minecraft.net
> user-agent: curl/7.74.0
> accept: */*
>
* TLSv1.3 (IN), TLS handshake, Newsession Ticket (4):
* TLSv1.3 (IN), TLS handshake, Newsession Ticket (4):
* old SSL session ID is stale, removing
* Connection state changed (MAX_CONCURRENT_STREAMS == 100)!
< HTTP/2 403
< server: AkamaiGHost
< mime-version: 1.0
< content-type: text/html
< content-length: 267
< expires: Mon, 04 Oct 2021 09:18:16 GMT
< date: Mon, 04 Oct 2021 09:18:16 GMT
< server-timing: cdn-cache; desc=HIT
< server-timing: edge; dur=1
<
<HTML><HEAD>
<TITLE>Access Denied</TITLE>
</HEAD><BODY>
<H1>Access Denied</H1>You don't have permission to access "http&#58;&#47;&#47;www&#46;minecraft&#46;net&#47;" on this server.<P>
Reference&#32;&#35;18&#46;5d3a3717&#46;1633339096&#46;159ed665
</BODY>
</HTML>
* Connection #0 to host www.minecraft.net left intact

 

10 more comments

Very disappointing solution. This is an important bug, because it makes the entire website unusable for many people very often.

I agree with @FaRo1, I can't use the website, I'm forced to use a sketchy random proxy I found on Google to access minecraft.net. You should probably reconsider your decision

I had to use a user-agent changer and switch it to edge and windows in order to access the website.

I was having this issue for about a year now...

Only fixed when I disabled all my browser's extensions (including adblockers) and then cleared the cache and cookies.

The site works fine now... 

Can't claim my cape >\:(

[media]

LimitedCorner

(Unassigned)

minecraft.net

Retrieved