Error: (403) Forbidden while calling REST Telligent API

This question is not answered

Posted by niranjan

on Mon, Sep 10 2012 6:36 AM

Dear Support Team,

I am using Telligent Enterprise 3.1.0.23780 for developing application. I am getting Forbidden Error (403) while calling Telligent API.

I created an desktop application to access the Telligent api "api.ashx/v2/info.xml". Find below the code snippet :

Case 1 : AccessingUser = admin and API Key = abcxyz12 (admin api key)

var webClient = new WebClient();
 
var adminKey = String.Format("{0}:{1}", "asdasdsa121", "admin");
var adminKeyBase64 = Convert.ToBase64String(Encoding.UTF8.GetBytes(adminKey));
 
webClient.Headers.Add("Rest-User-Token", adminKeyBase64);
 
var requestUrl = "http://blrkct012pc/telligenttest.com/api.ashx/v2/info.xml"; // or .json
var xml = webClient.DownloadString(requestUrl);
 
Console.WriteLine(xml);

I got the result as below as expected:

<?xml version="1.0" encoding="utf-8"?><Response><Info /><Warnings /><Errors /><InfoResult><SiteName>Telligent</SiteName><SiteDescription>The platform that enables you to build rich, interactive communities</SiteDescription><Product>Telligent Enterprise 3.1.0.23780</Product><Platform>6.1.0.23780</Platform><Webservice>6.1.0.23780</Webservice><AccessingUser>admin</AccessingUser><TimeZone>5</TimeZone><TimeZoneInfo>India Standard Time;330;(UTC+05:30) Chennai, Kolkata, Mumbai, New Delhi;India Standard Time;India Daylight Time;;</TimeZoneInfo></InfoResult></Response>

Case 2 : AccessingUser = abcuser and API Key = vsads123 (abcuser api key )

I tried to acces the Telligent API by creating another telligent user in Telligent and genreated its API key.

var webClient = new WebClient();
 
var adminKey = String.Format("{0}:{1}", "vsads123", "abcuser");
var adminKeyBase64 = Convert.ToBase64String(Encoding.UTF8.GetBytes(adminKey));
 
webClient.Headers.Add("Rest-User-Token", adminKeyBase64);
 
var requestUrl = "http://blrkct012pc/telligenttest.com/api.ashx/v2/info.xml"; // or .json
var xml = webClient.DownloadString(requestUrl);
 
Console.WriteLine(xml);
 
I got the error as below : 
 
ystem.Net.WebException: The remote server returned an error: (403) Forbidden.
   at System.Net.WebClient.DownloadDataInternal(Uri address, WebRequest& request)
   at System.Net.WebClient.DownloadString(Uri address)
   at System.Net.WebClient.DownloadString(String address)
 
I am using Form authentication for Telligent enterprise.  Accessing user "abcuser" has adminstrator role assigened to him same as "admin" user.
 
Please let me know how to resolve this issue.
 
Let me know when we can have a conf calling to resolve this technical problem.

Thanks and regards,

Niranjan

Contact details: (+91) 7760633440

All Replies

Posted by Dan Hounshell

on Mon, Sep 10 2012 2:26 PM

Please add a try/catch around your call to webClient.DownloadString(requestUrl)

The catch should be for WebException ex

in the catch code set your xml value to the response using something like:

using (var reader = new StreamReader(ex.Response.GetResponseStream()))

{

xml = reader.ReadToEnd();

}

Doing this will cause your xml value to contain the actual response from REST rather than just an error with the response code.

Having the full response and any error/warning messages will help to debug the issue.

Posted by niranjan

on Tue, Sep 11 2012 5:33 AM

I catched WebException for function call webClient.DownloadString(requestUrl).

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<title>IIS 7.5 Detailed Error - 403.0 - Invalid credentials</title>
<style type="text/css">

</style>

</head>
<body>
<div id="header"><h1>Server Error in Application "DEFAULT WEB SITE/TELLIGENTENTERPRISE"</h1></div>
<div id="server_version"><p>Internet Information Services 7.5</p></div>
<div id="content">
<div class="content-container">
<fieldset><legend>Error Summary</legend>
<h2>HTTP Error 403.0 - Invalid credentials</h2>
<h3>You do not have permission to view this directory or page.</h3>
</fieldset>
</div>
<div class="content-container">
<fieldset><legend>Detailed Error Information</legend>
<div id="details-left">
   <table border="0" cellpadding="0" cellspacing="0">
    <tr class="alt"><th>Module</th><td>ManagedPipelineHandler</td></tr>
    <tr><th>Notification</th><td>ExecuteRequestHandler</td></tr>
    <tr class="alt"><th>Handler</th><td>Telligent.Evolution.Rest.Infrastructure.RestHttpHandler</td></tr>
    <tr><th>Error Code</th><td>0x00000000</td></tr>

   </table>
</div>
<div id="details-right">
   <table border="0" cellpadding="0" cellspacing="0">
    <tr class="alt"><th>Requested URL</th><td>http://blrkiet0137pc:80/TelligentEnterprise/api.ashx/v2/info.xml</td></tr>
    <tr><th>Physical Path</th><td>C:\inetpub\TelligentEnterprise\api.ashx\v2\info.xml</td></tr>
    <tr class="alt"><th>Logon Method</th><td>Anonymous</td></tr>
    <tr><th>Logon User</th><td>Anonymous</td></tr>

   </table>
   <div class="clear"></div>
</div>
</fieldset>
</div>
<div class="content-container">
<fieldset><legend>Most likely causes:</legend>
<ul> <li>This is a generic 403 error and means the authenticated user is not authorized to view the page.</li> </ul>
</fieldset>
</div>
<div class="content-container">
<fieldset><legend>Things you can try:</legend>
<ul> <li>Create a tracing rule to track failed requests for this HTTP status code. For more information about creating a tracing rule for failed requests, click <a href="http://go.microsoft.com/fwlink/?LinkID=66439">here</a>. </li> </ul>
</fieldset>
</div>

<div class="content-container">
<fieldset><legend>Links and More Information</legend>
This generic 403 error means that the authenticated user is not authorized to use the requested resource. A substatus code in the IIS log files should indicate the reason for the 403 error. If a substatus code does not exist, use the steps above to gather more information about the source of the error.
<p><a href="http://go.microsoft.com/fwlink/?LinkID=62293&IIS70Error=403,0,0x00000000,7601">View more information »</a></p>

</fieldset>
</div>
</div>
</body>
</html>

Note: above error result for Case 2 : AccessingUser = abcuser and API Key = vsads123 (abcuser api key )

It works fine for Case 1 : AccessingUser = admin and API Key = abcxyz12 (admin api key)

Appreciate your realy response to resolve this problem.

Thanks in advance,

Niranjan

Posted by Dan Hounshell

on Tue, Sep 11 2012 3:30 PM

I have a suspicion, but I'll wait to test one more thing. Change the URL you are querying to do a GET of the home page of your site instead of a REST URL: so something like http://blrkct012pc/telligenttest.com/default.aspx. What happens now in both cases?

Posted by niranjan

on Wed, Sep 12 2012 6:51 AM

As suggested, I queried GET of home page of my site http://blrkct0123pc/telligenttest.com/default.aspx.

I got the same result for both of cases.

Find below the details of result :

<!DOCTYPE html>

<title>

Home - Telligent

</title></head>

<div>

</div>

// <![CDATA[

try { jQuery.telligent.evolution.site.configure({baseUrl:'\/TelligentEnterprise\/',monthNames:['Jan','Feb','Mar','Apr','May','Jun','Jul','Aug','Sep','Oct','Nov','Dec'],dayNames:['Sun','Mon','Tue','Wed','Thu','Fri','Sat'],authorizationCookieName:'AuthorizationCookie',defaultErrorMessage:'An error occurred. Please try again or contact your administrator.',defaultMultiErrorMessagePrefix:'The following errors occurred: '});

jQuery.extend($.fn.evolutionUserFileTextBox.defaults,{removeText:'Remove',selectText:'Select\/Upload...',noFileText:'No File Selected'});

jQuery.telligent.evolution.navigationConfirmation.configure({message:'==============================\r\nUnless you save before leaving this page, you will lose any changes you have made.\r\n=============================='});

jQuery.telligent.evolution.validation.registerExtensions({passwordInvalidMessage:'Password contains invalid chars ...',passwordRegex:'^.*$',emailInvalidMessage:'Your email address is invalid.',emailRegex:'^[!$&*\\-=^`|~#%\'\\.\"+\/?_{}\\\\a-zA-Z0-9 ]+@[\\-\\.a-zA-Z0-9]+(?:\\.[a-zA-Z0-9]+)+$',usernameInvalidMessage:'Your sign in name does not meet the requirements for this site.',usernameRegex:'^[a-zA-Z0-9_\\- @\\\\\\.]+$',emailsInvalidMessage:'One or more emails is invalid',urlInvalidMessage:'URL not in correct format',urlRegex:'^((http|https|mailto|mms):|\/|#|~\/)'});

} catch(e) { };

// ]]>

</script>

</ul>

</div>

</div></div>

<label class="field-item-header query" for="header-2_query">Search</label>

</li>

</ul>

</fieldset>

</div>

</div></div>

</div>

<li class="navigation-item browse-groups"><a href="#" class="internal-link browse-groups" id="header-3_browse-groups"><span></span>Browse Groups</a></li>

</ul>

</div>

</div></div>

</div>

</div></div>

</div>

</div></div><div class="header-fragments-footer"></div>

<div id="ctl00_content_ctl00_tabs" class="tab-set"><div id="tab-897382081" class="tab selected"><div><a href="/telligententerprise/default.aspx">Home</a></div></div><div id="tab-897382082" class="tab"><div><a href="/telligententerprise/default.aspx?Page-Tab=897382082">Groups</a></div></div><div id="tab-897382083" class="tab"><div><a href="/telligententerprise/default.aspx?Page-Tab=897382083">People</a></div></div></div></div>

News

</div>

<div class="message norecords">No blog posts have yet been created.</div>

</div>

</div></div>

</div>

</div>

</div></div>

Site Activity

</div>

</li>

</ul>

<div id="fragment-897382085_loading" class="message loading">Loading activity...</div>

</div>

</div></div>

</div>

</div></div>

<a href="telligent.com/">Powered by Telligent</a>

</div>

</div></div>

</div>

</div></div><div class="footer-fragments-footer"></div>

jQuery(function(){

jQuery.telligent.evolution.widgets.siteSearch.register({

searchUrl: '/TelligentEnterprise/utility/scripted-file.ashx?_cf=search.vm&_fid=2&_ct=header&_cp=&_ctt=0c647246673542f9875dc8b991fe739b&_ctc=-1&_ctn=aa8056256ecb481bae92f2db9f87e893&_cc=0&AppType=Unknown',

searchResultsUrl: '/TelligentEnterprise/search/default.aspx?{0}',

query: jQuery('#header-2_query'),

optionsLink: jQuery('#header-2_options'),

optionsContent: jQuery('#header-2_filter-options'),

filterName: 'header-2_filter',

loading: 'Searching...',

error: 'Search is currently unavailable.',

groupId: ''

});

</script>

jQuery(function(){

jQuery.telligent.evolution.widgets.siteUserLinks.register({

browseGroupsLink: jQuery('#header-3_browse-groups'),

favoritePlacesLink: jQuery('#header-3_favorite-places'),

browseUrl: '/TelligentEnterprise/utility/scripted-file.ashx?_cf=browse-groups.vm&_fid=3&_ct=header&_cp=&_ctt=0c647246673542f9875dc8b991fe739b&_ctc=-1&_ctn=aa8056256ecb481bae92f2db9f87e893&_cc=0&AppType=Unknown',

searchUrl: '/TelligentEnterprise/utility/scripted-file.ashx?_cf=search-groups.vm&_fid=3&_ct=header&_cp=&_ctt=0c647246673542f9875dc8b991fe739b&_ctc=-1&_ctn=aa8056256ecb481bae92f2db9f87e893&_cc=0&AppType=Unknown',

favoritePlacesUrl: '/TelligentEnterprise/utility/scripted-file.ashx?_cf=favorite-places.vm&_fid=3&_ct=header&_cp=&_ctt=0c647246673542f9875dc8b991fe739b&_ctc=-1&_ctn=aa8056256ecb481bae92f2db9f87e893&_cc=0&AppType=Unknown',

browseGroupsLoading: 'Loading...',

browseGroupsError: 'An error occurred while attempting to load groups.',

favoritePlacesLoading: 'Loading...',

favoritePlacesError: 'An error occurred while attempting to load favorite places.',

userId: 2101

});

</script>

// <![CDATA[

ctl00_header_ctl00 = new ContentFragmentContainerCustomCallback('ctl00_header_ctl00',new Function('mode','parameters','callback','errorCallback','context','ctl00_header_ctl00_ctl00._doCallback(mode+\':\'+parameters,callback,context,errorCallback);'));

// ]]>

</script> <script type="text/javascript" src="/TelligentEnterprise/cfs-file.ashx/__key/defaultwidgets/7bb87a0cc5864a9392ae5b9e5f9747b7-dd895400883f4f43beca9fd9376a55b1/ui.js"></script>

//<![CDATA[

jQuery.telligent.evolution.widgets.blogPostList.register({

wrapper: "#fragment-897382081",

listUrl: "/TelligentEnterprise/utility/scripted-file.ashx?_cf=callback-standard-list.vm&_fid=897382081&_ct=page&_cp=common-home&_ctt=294234b2950540a9a67993162fd50c1c&_ctc=2101&_ctn=aa8056256ecb481bae92f2db9f87e893&_cc=0&AppType=Unknown",

detailUrl: "/TelligentEnterprise/utility/scripted-file.ashx?_cf=callback-standard-detail.vm&_fid=897382081&_ct=page&_cp=common-home&_ctt=294234b2950540a9a67993162fd50c1c&_ctc=2101&_ctn=aa8056256ecb481bae92f2db9f87e893&_cc=0&AppType=Unknown",

viewType: "simpleExpanded"

});

//]]>

</script>

jQuery(function(){

jQuery.telligent.evolution.widgets.activityMessageList.register({

accessingUserId: 2101,

messageId: '',

filterType: 'Dashboard',

userId: 2101,

groupId: 1,

defaultTab: 'AllActivityForAccessingUser_',

tabs: jQuery('#fragment-897382085_tabs'),

list: jQuery('#fragment-897382085_list'),

pager: jQuery('#fragment-897382085_pager'),

loading: jQuery('#fragment-897382085_loading'),

listUrl: '/TelligentEnterprise/utility/scripted-file.ashx?_cf=list.vm&_fid=897382085&_ct=page&_cp=common-home&_ctt=294234b2950540a9a67993162fd50c1c&_ctc=2101&_ctn=aa8056256ecb481bae92f2db9f87e893&_cc=0&AppType=Unknown',

deleteConfirmation: 'Are you sure you want to delete this activity message?',

noResults: 'No activity.',

error: 'There was an error while retrieving activity.'

});

</script>

// <![CDATA[

ctl00_content_ctl00 = new ContentFragmentContainerCustomCallback('ctl00_content_ctl00',new Function('mode','parameters','callback','errorCallback','context','ctl00_content_ctl00_ctl00._doCallback(mode+\':\'+parameters,callback,context,errorCallback);'));

// ]]>

</script> <script type="text/javascript" src="/TelligentEnterprise/cfs-file.ashx/__key/defaultwidgets/7bb87a0cc5864a9392ae5b9e5f9747b7-212f71d69e37457887f33f32918f6ae2/ui.js"></script>

jQuery(function(){

jQuery.telligent.evolution.widgets.userHover.register({

getUserInformationUrl: '/TelligentEnterprise/utility/scripted-file.ashx?_cf=get-user-information.vm&_fid=2&_ct=footer&_cp=common-home&_ctt=0c647246673542f9875dc8b991fe739b&_ctc=-1&_ctn=aa8056256ecb481bae92f2db9f87e893&_cc=0&AppType=Unknown',

getRecentActivityUrl: '/TelligentEnterprise/utility/scripted-file.ashx?_cf=get-recent-activity.vm&_fid=2&_ct=footer&_cp=common-home&_ctt=0c647246673542f9875dc8b991fe739b&_ctc=-1&_ctn=aa8056256ecb481bae92f2db9f87e893&_cc=0&AppType=Unknown'

});

</script>

// <![CDATA[

ctl00_footer_ctl00 = new ContentFragmentContainerCustomCallback('ctl00_footer_ctl00',new Function('mode','parameters','callback','errorCallback','context','ctl00_footer_ctl00_ctl00._doCallback(mode+\':\'+parameters,callback,context,errorCallback);'));

// ]]>

</script><script type="text/javascript">

// <![CDATA[

window.ctl00_header_ctl00_ctl00 = new Telligent_CallbackManager('ctl00_header_ctl00_ctl00','ctl00$header$ctl00$ctl00','aspnetForm');

// ]]>

</script><script type="text/javascript">

// <![CDATA[

window.ctl00_content_ctl00_ctl00 = new Telligent_CallbackManager('ctl00_content_ctl00_ctl00','ctl00$content$ctl00$ctl00','aspnetForm');

// ]]>

</script><script type="text/javascript">

// <![CDATA[

window.ctl00_footer_ctl00_ctl00 = new Telligent_CallbackManager('ctl00_footer_ctl00_ctl00','ctl00$footer$ctl00$ctl00','aspnetForm');

// ]]>

</script></form>

</body>

</html>

<!DOCTYPE html>

<title>

Home - Telligent

</title></head>

<div>

</div>

// <![CDATA[

jQuery.extend($.fn.evolutionUserFileTextBox.defaults,{removeText:'Remove',selectText:'Select\/Upload...',noFileText:'No File Selected'});

} catch(e) { };

// ]]>

</script>

</ul>

</div>

</div></div>

<label class="field-item-header query" for="header-2_query">Search</label>

</li>

</ul>

</fieldset>

</div>

</div></div>

</div>

<li class="navigation-item browse-groups"><a href="#" class="internal-link browse-groups" id="header-3_browse-groups"><span></span>Browse Groups</a></li>

</ul>

</div>

</div></div>

</div>

</div></div>

</div>

</div></div><div class="header-fragments-footer"></div>

News

</div>

<div class="message norecords">No blog posts have yet been created.</div>

</div>

</div></div>

</div>

</div>

</div></div>

Site Activity

</div>

</li>

</ul>

<div id="fragment-897382085_loading" class="message loading">Loading activity...</div>

</div>

</div></div>

</div>

</div></div>

<a href="telligent.com/">Powered by Telligent</a>

</div>

</div></div>

</div>

</div></div><div class="footer-fragments-footer"></div>

jQuery(function(){

jQuery.telligent.evolution.widgets.siteSearch.register({

searchResultsUrl: '/TelligentEnterprise/search/default.aspx?{0}',

query: jQuery('#header-2_query'),

optionsLink: jQuery('#header-2_options'),

optionsContent: jQuery('#header-2_filter-options'),

filterName: 'header-2_filter',

loading: 'Searching...',

error: 'Search is currently unavailable.',

groupId: ''

});

</script>

jQuery(function(){

jQuery.telligent.evolution.widgets.siteUserLinks.register({

browseGroupsLink: jQuery('#header-3_browse-groups'),

favoritePlacesLink: jQuery('#header-3_favorite-places'),

browseGroupsLoading: 'Loading...',

browseGroupsError: 'An error occurred while attempting to load groups.',

favoritePlacesLoading: 'Loading...',

favoritePlacesError: 'An error occurred while attempting to load favorite places.',

userId: 2101

});

</script>

// <![CDATA[

// ]]>

</script> <script type="text/javascript" src="/TelligentEnterprise/cfs-file.ashx/__key/defaultwidgets/7bb87a0cc5864a9392ae5b9e5f9747b7-dd895400883f4f43beca9fd9376a55b1/ui.js"></script>

//<![CDATA[

jQuery.telligent.evolution.widgets.blogPostList.register({

wrapper: "#fragment-897382081",

viewType: "simpleExpanded"

});

//]]>

</script>

jQuery(function(){

jQuery.telligent.evolution.widgets.activityMessageList.register({

accessingUserId: 2101,

messageId: '',

filterType: 'Dashboard',

userId: 2101,

groupId: 1,

defaultTab: 'AllActivityForAccessingUser_',

tabs: jQuery('#fragment-897382085_tabs'),

list: jQuery('#fragment-897382085_list'),

pager: jQuery('#fragment-897382085_pager'),

loading: jQuery('#fragment-897382085_loading'),

deleteConfirmation: 'Are you sure you want to delete this activity message?',

noResults: 'No activity.',

error: 'There was an error while retrieving activity.'

});

</script>

// <![CDATA[

// ]]>

</script> <script type="text/javascript" src="/TelligentEnterprise/cfs-file.ashx/__key/defaultwidgets/7bb87a0cc5864a9392ae5b9e5f9747b7-212f71d69e37457887f33f32918f6ae2/ui.js"></script>

jQuery(function(){

jQuery.telligent.evolution.widgets.userHover.register({

});

</script>

// <![CDATA[

// ]]>

</script><script type="text/javascript">

// <![CDATA[

window.ctl00_header_ctl00_ctl00 = new Telligent_CallbackManager('ctl00_header_ctl00_ctl00','ctl00$header$ctl00$ctl00','aspnetForm');

// ]]>

</script><script type="text/javascript">

// <![CDATA[

window.ctl00_content_ctl00_ctl00 = new Telligent_CallbackManager('ctl00_content_ctl00_ctl00','ctl00$content$ctl00$ctl00','aspnetForm');

// ]]>

</script><script type="text/javascript">

// <![CDATA[

window.ctl00_footer_ctl00_ctl00 = new Telligent_CallbackManager('ctl00_footer_ctl00_ctl00','ctl00$footer$ctl00$ctl00','aspnetForm');

// ]]>

</script></form>

</body>

</html>

Appreciate your early reply.

thanks, Niranjan

Posted by Dan Hounshell

on Wed, Sep 12 2012 1:53 PM

Please try one additional test. Use the admin account to make a call to info.xml but impersonating abcuser. Use the username and api key of the admin user but add a Rest-Impersonate-User header to the request that contains the username abcuser.

Posted by niranjan

on Thu, Sep 13 2012 11:44 AM

Problem got resolved. Thanks for your continuous support.

Solution was that I was using the API key generated by admin ( logged in account) and was getting "Forbidden error " for every API call. When I generated API key while logging into my account then REST API Call started working fine.

I found one issue with Telligent API Key generation, one can genrated api key for any random dummy user(232@#!@as), therer is not aany validation that should not be allowed. Only logged user should generate key for himself.

Thanks and regards,

Niranjan