Some API endpoints randomly return error 403

[soheilpro]

Since 2021-06-28 14:10 UTC I've started to receive random HTTP 403 errors for the following endpoints:

• /v1/me
• /v1/me/player/currently-playing
• /v1/artists
• /v1/tracks

The last two deal with public data, so technically they should never return error 403 in the first place.

Usually retrying the request makes the error go away, but sometimes it takes up to four or more attempts.

Here's a typical response that I get:

    "body": {},
    "headers": {
      "cache-control": "private, max-age=0",
      "access-control-allow-origin": "*",
      "access-control-allow-headers": "Accept, App-Platform, Authorization, Content-Type, Origin, Retry-After, Spotify-App-Version, X-Cloud-Trace-Context, client-token, content-access-token",
      "access-control-allow-methods": "GET, POST, OPTIONS, PUT, DELETE, PATCH",
      "access-control-allow-credentials": "true",
      "access-control-max-age": "604800",
      "content-encoding": "gzip",
      "strict-transport-security": "max-age=31536000",
      "x-content-type-options": "nosniff",
      "date": "Tue, 29 Jun 2021 07:25:36 GMT",
      "server": "envoy",
      "via": "HTTP/2 edgeproxy, 1.1 google",
      "alt-svc": "clear",
      "connection": "close",
      "transfer-encoding": "chunked"
    },
    "statusCode": 403,

[kj40]

Has there been any update on this issue I keep receiving this error when try to delete a track. 403 Client Error: Forbidden for url: https://api.spotify.com/v1/playlists

[Zorgos]

Hy, i keep getting an error 403 forbidden when i want to get the player queue. I have the scope user-read-playback-state

and i have alredy try reffressing the token or generate a new token.

[Poroca]

Same for me, I was testing the API earlier from the start, got the authorization to work fine, and when I tried to use the .getTrack I recieved the 403 with no error message, tried getting other track Id's but that won't work either.

[HThukyd]

curl --location 'https://api.spotify.com/v1/me/top/tracks' \

--header 'Authorization: Bearer XYZ'

I get a 403 forbidden back without any message. 

In my OAuth 2.0  i've got the scope "playlist-read-private user-top-read"

Is there anything that I am doing horribly wrong?

[tylersehon]

Has there been a fix for this? I am trying to fetch user's saved episodes, and am getting a 403 due to Forbidden. Scope is 'user-library-read+user-read-playback-position'.

[Malouette]

Hi, I am having the 403 error (Check settings on developer.spotify.com/dashboard, the user may not be registered.) when trying to send a POST request to the endpoint /playlist to create a new playlist. My user is registered because I am the creator of this app, and I added my name and my email address in the dashbord > User Management. So I think the issue is on Spotify's side.

My client ID is 03c28c476ec04dd0932e8f5e26085c0e and my user ID is 31tbhmmzqhyxf5xzix6xvvhiivpe

Thank you