Hello there.
Recently I tried to use Discord bot for checking GearScore, but noticed that I am getting 403 error. Can somebody confirm that there is a problem connecting to API through these providers?
'); document.write(''); var yuipath = 'clientscript/yui'; var yuicombopath = ''; var remoteyui = false; } else // Load Rest of YUI remotely (where possible) { var yuipath = 'https://ajax.googleapis.com/ajax/libs/yui/2.9.0/build'; var yuicombopath = ''; var remoteyui = true; if (!yuicombopath) { document.write(''); } } var SESSIONURL = ""; var SECURITYTOKEN = "guest"; var IMGDIR_MISC = "warmane/misc"; var IMGDIR_BUTTON = "warmane/buttons"; var vb_disable_ajax = parseInt("0", 10); var SIMPLEVERSION = "422"; var BBURL = "https://forum.warmane.com"; var LOGGEDIN = 0 > 0 ? true : false; var THIS_SCRIPT = "showthread"; var RELPATH = "showthread.php?t=480812"; var PATHS = { forum : "", cms : "", blog : "" }; var AJAXBASEURL = "https://forum.warmane.com/"; var CoTTooltips = { rename: true, icons: false, iconsize: 15, qualitycolor: true, overridecolor: { spells: '#839309', items: '', npcs: '#fff', objects: '#fff', quests: '#ffb100', achievements: '#fff' } }; // -->
Hello there.
Recently I tried to use Discord bot for checking GearScore, but noticed that I am getting 403 error. Can somebody confirm that there is a problem connecting to API through these providers?
Yes, I get a cloudflare challenge from OVH. I don't know that bot, but often curl-impersonate will bypass those challenges.
Okay, but what about 403s? When doing curl -fSsL https://armory.................. since L is for following, I am getting 403. When just curling, it's giving a CF challenge. I would like somebody from Warmane to tell me what is going on, and is there any kind of whitelist so I can apply for.
The cloudflare challenge returns a 403 status code, that's why you see a 403. If you do curl -v https://armory... you will see you get a 403 status code but with a cloudflare challenge.
Does the staff want you to use the API from OVH? Yes, of course. Will they add an exception for you or for OVH in cloudflare settings? Very unlikely. So once again, try curl-impersonate.
They could also move the api to something like api.warmane.com, and have a less extreme captcha or even api token-based login.
I'd happily verify with a token, if it meant i wouldn't have to ever deal with captchas
Same issue here with completely different server provider. Blocking automated scripts access to API ruins the whole idea of API.
Yes, since the attack yesterday the website is completely locked down and inaccessible. Let's hope the protections are lowered with time.
I can add to that that even navigating through the site (forum, armory, main account) is becoming a pain in the butt with these constant CF challenges. The API is completely dead at this point. Can't we have something like api.warmane.com without this restriction or grant us api keys or something?
I opened a ticket 2 weeks ago and I haven't got any response yet. I'd say it's a dead end...
I made a ticket multiple months ago, yeah don’t expect one soon