# 403 Error, API Basic Auth Access

**URL:** <https://forum.mautic.org/t/403-error-api-basic-auth-access/21975>\
**Category:** Product Support\
**Created:** [December 10, 2021, 8:23pm UTC](https://forum.mautic.org/t/403-error-api-basic-auth-access/21975 "2021-12-10T20:23:03Z")\
**Posts on this page:** 11\
**Page:** 1

<div class="post-metadata">

**Author:** ![mouadallah](https://sea2.discourse-cdn.com/flex020/user_avatar/forum.mautic.org/mouadallah/32/6285_2.png) [@mouadallah](https://forum.mautic.org/u/mouadallah)\
**Post date:** [December 10, 2021, 8:23pm UTC](https://forum.mautic.org/t/403-error-api-basic-auth-access/21975/1 "2021-12-10T20:23:03Z")

</div>

**Your software**  
My Mautic version is: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips  
My PHP version is: 7.3.15

My problem is:  
I’m getting 403 error when trying to connect to the Api Using the Basic Auth ,and it says that i dont have permission, and i’m quite sure that i’m using the right credentials, and i’m trying to do a call to get contacts,  
and the same Credentials are working fine to access the mautic platform,  
get …/api/contacts

```
<title>403 Forbidden</title>

```

```
<h1>Forbidden</h1>

<p>You don't have permission to access /api/contacts

    on this server.</p>

```

 ![image](https://us1.discourse-cdn.com/flex020/uploads/mautic/original/2X/a/a86695203e98a95aa683eceedcfd178d71c1bb27.png)

These errors are showing in the log: when i do the call to the API

Steps I have tried to fix the problem:  
I have restarted my comptuer , and removed all the cash and cookies

---

<div class="post-metadata">

**Author:** ![joeyk](https://sea2.discourse-cdn.com/flex020/user_avatar/forum.mautic.org/joeyk/32/11164_2.png) [@joeyk](https://forum.mautic.org/u/joeyk)\
**Post date:** [December 11, 2021, 8:05am UTC](https://forum.mautic.org/t/403-error-api-basic-auth-access/21975/2 "2021-12-11T08:05:49Z")

</div>

You need to refresh Mautic cache after basic auth is turned on.

---

<div class="post-metadata">

**Author:** ![mouadallah](https://sea2.discourse-cdn.com/flex020/user_avatar/forum.mautic.org/mouadallah/32/6285_2.png) [@mouadallah](https://forum.mautic.org/u/mouadallah)\
**Post date:** [December 16, 2021, 6:45pm UTC](https://forum.mautic.org/t/403-error-api-basic-auth-access/21975/3 "2021-12-16T18:45:27Z")

</div>

Hello, Thank you for your prompt reply,  
we have cleared the Mautic cache but still getting same error,

---

<div class="post-metadata">

**Author:** ![saidhasyim](https://sea2.discourse-cdn.com/flex020/user_avatar/forum.mautic.org/saidhasyim/32/6368_2.png) [@saidhasyim](https://forum.mautic.org/u/saidhasyim)\
**Post date:** [October 23, 2022, 2:18pm UTC](https://forum.mautic.org/t/403-error-api-basic-auth-access/21975/5 "2022-10-23T14:18:08Z")

</div>

Hi mouadallah, by any chance you managed to resolve this? I got similar problem. i have read all the htaccess posts and tried all of them, but still encountered the same 403 errors. I’m using the latest mautic.

---

<div class="post-metadata">

**Author:** ![joeyk](https://sea2.discourse-cdn.com/flex020/user_avatar/forum.mautic.org/joeyk/32/11164_2.png) [@joeyk](https://forum.mautic.org/u/joeyk)\
**Post date:** [October 24, 2022, 7:04am UTC](https://forum.mautic.org/t/403-error-api-basic-auth-access/21975/6 "2022-10-24T07:04:26Z")

</div>

Hi, if you turn on basic auth + cleared mautic cache, this should be working.

---

<div class="post-metadata">

**Author:** ![saidhasyim](https://sea2.discourse-cdn.com/flex020/user_avatar/forum.mautic.org/saidhasyim/32/6368_2.png) [@saidhasyim](https://forum.mautic.org/u/saidhasyim)\
**Post date:** [October 24, 2022, 7:22am UTC](https://forum.mautic.org/t/403-error-api-basic-auth-access/21975/7 "2022-10-24T07:22:06Z")

</div>

Hey joeyk, thanks a lot. I turned on basic auth + cleared the cache. And did all the tips I can find in this forum about 403 error. But none of them work for me ☹

1. removed the whole \<IfModule
2. modify line 113 of

\<If “%{REQUEST\_URI} =~ m#^/(index|index\_dev|upgrade/upgrade).php#”\>

to

\<FilesMatch “^(index|index\_dev|filemanager|upgrade).php$”\>

1. add my Mautic installation folder in the path  
\<FilesMatch “^/email/(index|index\_dev|filemanager/upgrade).php$”\>

2. commented out  
\<FilesMatch “.php$”\>  
Require all denied  

3. CHMOD 777 to all my Mautic installation directories.

What I’ve noticed is that, I can access the API from Postman desktop, but not Postman browsers. I ensured the headers are the same. It just never work on browser version and it gives me 403 error.

I am on the latest Mautic, 4.4.3.  
PHP Version 8.0.24

Please help me… i am stuck for 2 days already. Tried any way i can. Thanks so much.

---

<div class="post-metadata">

**Author:** ![saidhasyim](https://sea2.discourse-cdn.com/flex020/user_avatar/forum.mautic.org/saidhasyim/32/6368_2.png) [@saidhasyim](https://forum.mautic.org/u/saidhasyim)\
**Post date:** [October 24, 2022, 7:23am UTC](https://forum.mautic.org/t/403-error-api-basic-auth-access/21975/8 "2022-10-24T07:23:03Z")

</div>

oh yes, I also tried using OAUTH2 authentication. Same behavior. I can do it successfully from Postman desktop, but not Postman browser (or any other API tools)

---

<div class="post-metadata">

**Author:** ![joeyk](https://sea2.discourse-cdn.com/flex020/user_avatar/forum.mautic.org/joeyk/32/11164_2.png) [@joeyk](https://forum.mautic.org/u/joeyk)\
**Post date:** [October 24, 2022, 7:46am UTC](https://forum.mautic.org/t/403-error-api-basic-auth-access/21975/9 "2022-10-24T07:46:52Z")

</div>

Hi,  
ok. What is your exact call in PHP? (replace psw and login with some chars.)

---

<div class="post-metadata">

**Author:** ![saidhasyim](https://sea2.discourse-cdn.com/flex020/user_avatar/forum.mautic.org/saidhasyim/32/6368_2.png) [@saidhasyim](https://forum.mautic.org/u/saidhasyim)\
**Post date:** [October 24, 2022, 8:44am UTC](https://forum.mautic.org/t/403-error-api-basic-auth-access/21975/10 "2022-10-24T08:44:02Z")

</div>

Here you go. Authorization key has been obfuscated. This will work on Desktop Postman, but not on Browser Postman. Thanks so much for looking into this.

```auto
<?php
require_once 'HTTP/Request2.php';
$request = new HTTP_Request2();
$request->setUrl('https://email.saidhasyim.com/api/contacts/16');
$request->setMethod(HTTP_Request2::METHOD_GET);
$request->setConfig(array(
  'follow_redirects' => TRUE
));
$request->setHeader(array(
  'Authorization' => 'Basic XXXXXXXXXXXXXXXXXXXXXXXXXX'
));
try {
  $response = $request->send();
  if ($response->getStatus() == 200) {
    echo $response->getBody();
  }
  else {
    echo 'Unexpected HTTP status: ' . $response->getStatus() . ' ' .
    $response->getReasonPhrase();
  }
}
catch(HTTP_Request2_Exception $e) {
  echo 'Error: ' . $e->getMessage();
}

```

---

<div class="post-metadata">

**Author:** ![joeyk](https://sea2.discourse-cdn.com/flex020/user_avatar/forum.mautic.org/joeyk/32/11164_2.png) [@joeyk](https://forum.mautic.org/u/joeyk)\
**Post date:** [October 24, 2022, 8:55am UTC](https://forum.mautic.org/t/403-error-api-basic-auth-access/21975/11 "2022-10-24T08:55:59Z")

</div>

> [@saidhasyim](#):
>
> `https://email.saidhasyim.com/api/contacts/16`

What if you try  
`$request->setUrl('login:psw@https://email.saidhasyim.com/api/contacts/16');`

?

---

<div class="post-metadata">

**Author:** ![saidhasyim](https://sea2.discourse-cdn.com/flex020/user_avatar/forum.mautic.org/saidhasyim/32/6368_2.png) [@saidhasyim](https://forum.mautic.org/u/saidhasyim)\
**Post date:** [October 24, 2022, 9:17am UTC](https://forum.mautic.org/t/403-error-api-basic-auth-access/21975/12 "2022-10-24T09:17:55Z")

</div>

I get invalid protocol error in Postman desktop. Could not send request.

```auto
<?php
$client = new http\Client;
$request = new http\Client\Request;
$request->setRequestUrl('XXXXXX:XXXX@https://email.saidhasyim.com/api/contacts/16');
$request->setRequestMethod('GET');
$request->setOptions(array());
$request->setHeaders(array(
  'Authorization' => 'Basic XXXXXXX'
));
$client->enqueue($request)->send();
$response = $client->getResponse();
echo $response->getBody();

```