Ugh, I see what's going on. Despite the fact that I'm setting a user agent in my app code, that's not finding its way down to the library code that handles the OAuth flow and "User-Agent: python-requests/2.32.4" was leaking through there. If I gorilla-patch the requests library to force it to send "User-Agent: spi-tools/requests", everything works.
So, that's what's going wrong. But how did it work yesterday? Did something change on the WMF end between yesterday and today? How is it working on my server that's running in toolforge, with exactly the same code? > On Feb 13, 2026, at 9:26 PM, Roy Smith via Cloud <[email protected]> > wrote: > > A couple of days ago, I created a new consumer > <https://meta.wikimedia.org/wiki/Special:OAuthListConsumers/view/04333ab1583d99786387a05025d99e7d>. > Everything was working fine, but starting this afternoon, I'm getting: > > 403 Client Error: Forbidden for url: > https://meta.wikimedia.org/w/index.php?title=Special%3AOAuth%2Finitiate > > I tried generating a new secret, but that didn't help. This is an instance > I'm running on my laptop. I've got exactly the same code running in > toolforge (with its own consumer key) and it still works. Any ideas what > might be wrong? > > _______________________________________________ > Cloud mailing list -- [email protected] > List information: > https://lists.wikimedia.org/postorius/lists/cloud.lists.wikimedia.org/
_______________________________________________ Cloud mailing list -- [email protected] List information: https://lists.wikimedia.org/postorius/lists/cloud.lists.wikimedia.org/
