When trying to whitelist players, the server returns back a 403: Forbidden error. This behaviour can also be observed if we send a cURL request to the API directly. This is running with a standard server jar downloaded from https://minecraft.net/download/server and ran according to the instructions there.
Notably, this problem does not occur if the player has previously joined the server.
See the images attached for further details.
Linked issues
is duplicated by 1
Attachments
Comments 23
I did as you suggested and tried changing my DNS settings- I changed from the default ones my ISP assigns to Cloudflare's 1.1.1.1 DNS, After a full restart and ensuring the new DNS is being utilized, the issues are still occurring.
If this is a network issue it's a very peculiar one as I've tried it on my home network as well as mobile hotspot.
Attached is a recording of my terminal running the vanilla server and attempting to whitelist a few different people, after that fails I run a command to show the DNS server being utilized, just to confirm I'm using the right one, and finally I tried again with a cURL request, which failed as well.
[media]I was able to replicate this when attempting to run /whitelist add on a player, I have also had issues with the bulk endpoint starting around the time of 1.21's release through modded server plugins calling it for name lookups, it gives a 403 fairly consistently (though not always). Interestingly, I have not had issues with the non-bulk endpoint. I am guessing some sort of WAF rule being too strict. Requests are being made from a datacenter in Virginia:
[17:07:01 ERROR]: Got an error with a html body connecting to https://api.minecraftservices.com/minecraft/profile/lookup/bulk/byname: <html>
<head><title>403 Forbidden</title></head>
<body>
<center><h1>403 Forbidden</h1></center>
<hr><center>Microsoft-Azure-Application-Gateway/v2</center>
</body>
</html>
[17:07:02 ERROR]: Got an error with a html body connecting to https://api.minecraftservices.com/minecraft/profile/lookup/bulk/byname: <html>
<head><title>403 Forbidden</title></head>
<body>
<center><h1>403 Forbidden</h1></center>
<hr><center>Microsoft-Azure-Application-Gateway/v2</center>
</body>
</html>
[17:07:03 ERROR]: Got an error with a html body connecting to https://api.minecraftservices.com/minecraft/profile/lookup/bulk/byname: <html>
<head><title>403 Forbidden</title></head>
<body>
<center><h1>403 Forbidden</h1></center>
<hr><center>Microsoft-Azure-Application-Gateway/v2</center>
</body>
</html>
[17:07:03 INFO]: That player does not existI was able to replicate this too. running the newest version 1.21.4. No mods no plugin system pure vanilla and i get:
whitelist add hypersmc
[15:01:33] [Server thread/ERROR]: Got an error with a html body connecting to https://api.minecraftservices.com/minecraft/profile/lookup/bulk/byname: <html>
<head><title>403 Forbidden</title></head>
<body>
<center><h1>403 Forbidden</h1></center>
<hr><center>Microsoft-Azure-Application-Gateway/v2</center>
</body>
</html>[15:01:34] [Server thread/ERROR]: Got an error with a html body connecting to https://api.minecraftservices.com/minecraft/profile/lookup/bulk/byname: <html>
<head><title>403 Forbidden</title></head>
<body>
<center><h1>403 Forbidden</h1></center>
<hr><center>Microsoft-Azure-Application-Gateway/v2</center>
</body>
</html>[15:01:35] [Server thread/ERROR]: Got an error with a html body connecting to https://api.minecraftservices.com/minecraft/profile/lookup/bulk/byname: <html>
<head><title>403 Forbidden</title></head>
<body>
<center><h1>403 Forbidden</h1></center>
<hr><center>Microsoft-Azure-Application-Gateway/v2</center>
</body>
</html>[15:01:35] [Server thread/INFO]: That player does not existHave the same issue on a fresh server and when attempting to run a spigot server. I simply downloaded the jar and ran it, nothing else is added so this issue is still going on.
[media]
This has popped up again today since 8AM BST. Hasn’t been an issue since January from @zhengwuzhang's post.
As Alex said, this seems to have been slowly increasing over the last couple of hours. It seems like any requests sent to http://api.mojang.com/users/profiles/minecraft/<username> end up in a 403.
To add to my previous comment, this also is occurring on the bulk-lookup API on api.mojang.com (POST https://api.mojang.com/profiles/minecraft). The api.minecraftservices.com hosted ones seem to be functional at the moment.
https://api.minecraftservices.com/
https://api.mojang.com/users/profiles/minecraft/console_id12093
[media][media]
This ticket pertains to a previous occurrence of the API 403 Forbidden error. The current, ongoing issue related to this error is being actively tracked under WEB-8043. To keep our tracking focused and avoid confusion, I am closing this ticket. Please follow WEB-8043 for the latest updates and resolution progress.
I'm unable to replicate this. Please see if this is still an issue for you.
If it is, please attach a video showcasing this, and please try using a mobile hotspot and switching DNS