Some API endpoints randomly return error 403

[soheilpro]

Since 2021-06-28 14:10 UTC I've started to receive random HTTP 403 errors for the following endpoints:

• /v1/me
• /v1/me/player/currently-playing
• /v1/artists
• /v1/tracks

The last two deal with public data, so technically they should never return error 403 in the first place.

Usually retrying the request makes the error go away, but sometimes it takes up to four or more attempts.

Here's a typical response that I get:

    "body": {},
    "headers": {
      "cache-control": "private, max-age=0",
      "access-control-allow-origin": "*",
      "access-control-allow-headers": "Accept, App-Platform, Authorization, Content-Type, Origin, Retry-After, Spotify-App-Version, X-Cloud-Trace-Context, client-token, content-access-token",
      "access-control-allow-methods": "GET, POST, OPTIONS, PUT, DELETE, PATCH",
      "access-control-allow-credentials": "true",
      "access-control-max-age": "604800",
      "content-encoding": "gzip",
      "strict-transport-security": "max-age=31536000",
      "x-content-type-options": "nosniff",
      "date": "Tue, 29 Jun 2021 07:25:36 GMT",
      "server": "envoy",
      "via": "HTTP/2 edgeproxy, 1.1 google",
      "alt-svc": "clear",
      "connection": "close",
      "transfer-encoding": "chunked"
    },
    "statusCode": 403,

[kj40]

Has there been any update on this issue I keep receiving this error when try to delete a track. 403 Client Error: Forbidden for url: https://api.spotify.com/v1/playlists

[Zorgos]

Hy, i keep getting an error 403 forbidden when i want to get the player queue. I have the scope user-read-playback-state

and i have alredy try reffressing the token or generate a new token.

[Poroca]

Same for me, I was testing the API earlier from the start, got the authorization to work fine, and when I tried to use the .getTrack I recieved the 403 with no error message, tried getting other track Id's but that won't work either.

[HThukyd]

curl --location 'https://api.spotify.com/v1/me/top/tracks' \

--header 'Authorization: Bearer XYZ'

I get a 403 forbidden back without any message. 

In my OAuth 2.0  i've got the scope "playlist-read-private user-top-read"

Is there anything that I am doing horribly wrong?

[tylersehon]

Has there been a fix for this? I am trying to fetch user's saved episodes, and am getting a 403 due to Forbidden. Scope is 'user-library-read+user-read-playback-position'.