BeatMods api returns 403 forbidden, but user is able to load url in browser

[megalon]

Discord user Mr. Kustogg's Bizarre Adventure#0458 is unable to connect to the BeatMods API, returning error 403 (Forbidden)
I sent them a debug build that adds more info to the error message.

However, the user is able to access the URL in browser.
https://beatmods.com/api/v1/mod?status=approved

The user states that their firewall is disabled, and they have no anti-virus.
Anyone have any ideas on this?

It has to be an anti-virus thing, right?

[raftario]

Maybe try to give him a custom build with the user agent from Chrome or Firefox to see if it fixes the issue ?
I'm currently working on implementing support for mirrors, so that might help too.

Edit : Maybe a Cloudflare issue ?

[megalon]

I just gave someone having this issue a custom build with the user agent set to Firefox and it did not fix the problem.

[megalon]

Update:
Cloudflare is likely the cause of this issue.
For at least one user, they were getting this error, and also unable to reach many sites without entering a captcha due to Cloudflare's DDOS protection.
Apparently this was caused by an incorrectly configured VR Chat server, which made the user's traffic appear as a DDOS attack to Cloudflare's servers.

See this writeup
https://medium.com/@vrchat/vrchat-downtime-post-mortem-3b956fee8c3e

The user was able to access the BeatMods API the next day.