I opened https://phabricator.wikimedia.org/T417477
> On Feb 13, 2026, at 11:01 PM, Roy Smith via Cloud <[email protected]> > wrote: > > Ugh, I see what's going on. Despite the fact that I'm setting a user agent > in my app code, that's not finding its way down to the library code that > handles the OAuth flow and "User-Agent: python-requests/2.32.4" was leaking > through there. If I gorilla-patch the requests library to force it to send > "User-Agent: spi-tools/requests", everything works. > > So, that's what's going wrong. But how did it work yesterday? Did something > change on the WMF end between yesterday and today? How is it working on my > server that's running in toolforge, with exactly the same code? > >> On Feb 13, 2026, at 9:26 PM, Roy Smith via Cloud <[email protected]> >> wrote: >> >> A couple of days ago, I created a new consumer >> <https://meta.wikimedia.org/wiki/Special:OAuthListConsumers/view/04333ab1583d99786387a05025d99e7d>. >> Everything was working fine, but starting this afternoon, I'm getting: >> >> 403 Client Error: Forbidden for url: >> https://meta.wikimedia.org/w/index.php?title=Special%3AOAuth%2Finitiate >> >> I tried generating a new secret, but that didn't help. This is an instance >> I'm running on my laptop. I've got exactly the same code running in >> toolforge (with its own consumer key) and it still works. Any ideas what >> might be wrong? >> >> _______________________________________________ >> Cloud mailing list -- [email protected] >> List information: >> https://lists.wikimedia.org/postorius/lists/cloud.lists.wikimedia.org/ > > _______________________________________________ > Cloud mailing list -- [email protected] > List information: > https://lists.wikimedia.org/postorius/lists/cloud.lists.wikimedia.org/
_______________________________________________ Cloud mailing list -- [email protected] List information: https://lists.wikimedia.org/postorius/lists/cloud.lists.wikimedia.org/
