We are using the following APIs to update and suspend users but we are getting 403 errors. Can you inform us what is the cause for this error. FYI, we are using API key of admin user. Suspend API `{{base_url}}/admin/users/316/suspend?api_key={{api_key}}&api_username={{api_username}}` Request BODY { "suspend_until": "3020-04-17", "reason": "inactive" } Response - 403 Forbidden Email update {{base_url}}/users/{username}/preferences/email?api_key={{api_key}}&api_username={{api_username}} Request BODY { "email": "discourse1@example.com" } Response - 403 Forbidden

Even tried it as well.Getting same 403 Forbidden with BODY-> [“BAD CSRF”]

The API credentials need to be in the request header. You also need to use a dash instead of an underscore for the header field names: api_key needs to be changed to api-key (or Api-Key) api_username needs to be changed to api-username (or Api-Username) The rule is that the header field names are not case sensitive, but you need to use dashes, not underscores. (I learned this the hard way.) Have a look at the example at the top of Discourse REST API Documentation to see a properly formatted API request.

403 Error during multiple API calls

Development

pfaffman (Jay Pfaffman) April 17, 2020, 12:55pm 2

You need to put the API key in the header, not the url.

Topic		Replies	Views
API is throwing 404 errors Product Support	3	243	May 16, 2025
BAD CSRF on user modification Product Support	2	580	July 6, 2020
"BAD CSRF" when executing PUT using API, curl, and PHP Development rest-api	5	2493	October 5, 2021
Getting ["BAD CSRF"] when updating topic via API [python] Development rest-api	2	1121	August 9, 2021
'BAD CSRF' while creating a new post Product Support	1	1943	April 23, 2020

403 Error during multiple API calls

Related topics