WooCommerce update 403 Forbidden

(@nawawijamili)

3 years, 10 months ago

Hi @kotyarashop,

Thanks for the report. I will try to replicate the issue and update once found the solutions.

Meanwhile, if you enabled “Configuration -> Limit WP-Admin HTTP Requests” or “Configuration -> HTTP Request Expect header tweaks”, please try to disable it and see if that can solve this issue.

Thanks.

Thread Starter

(@kotyarashop)

Hello @nawawijamili

Both options was disabled.

Also there is mistake with “Prevent robots crawling add-to-cart links” option.
Line User-agent: * is redundant because it repeats the first line of the file.

Plugin Author

(@nawawijamili)

@kotyarashop noted with thanks.

Plugin Author

(@nawawijamili)

Hi, after debugging, it seems the issue is from WooCommerce, it failed to authenticate if a product is empty and assuming it related to the subscription.

File: wp-content/plugins/woocommerce/includes/admin/helper/class-wc-helper-api.php
Method: WC_Helper_API::request()
Line: 44

To debug, insert this code in WC_Helper_API::request()

Code:


file_put_contents(WP_CONTENT_DIR.'/WOODEBUG.txt', __METHOD__."\n".$url."\n".print_r($args,1)."\n", FILE_APPEND);

Before:


    public static function request( $endpoint, $args = array() ) {
        $url = self::url( $endpoint );

        if ( ! empty( $args['authenticated'] ) ) {
            if ( ! self::_authenticate( $url, $args ) ) {
                return new WP_Error( 'authentication', 'Authentication failed.' );
            }
	    }

        /**
         * Allow developers to filter the request args passed to wp_safe_remote_request().
         * Useful to remove sslverify when working on a local api dev environment.
         */
	    $args = apply_filters( 'woocommerce_helper_api_request_args', $args, $endpoint );

        // TODO: Check response signatures on certain endpoints.
        return wp_safe_remote_request( $url, $args );
    }

After:


    public static function request( $endpoint, $args = array() ) {
        $url = self::url( $endpoint );

        if ( ! empty( $args['authenticated'] ) ) {
            if ( ! self::_authenticate( $url, $args ) ) {
                file_put_contents(WP_CONTENT_DIR.'/WOODEBUG.txt', __METHOD__."\n".$url."\n".print_r($args,1)."\n", FILE_APPEND);
                return new WP_Error( 'authentication', 'Authentication failed.' );
            }
	    }

        /**
         * Allow developers to filter the request args passed to wp_safe_remote_request().
         * Useful to remove sslverify when working on a local api dev environment.
         */
	    $args = apply_filters( 'woocommerce_helper_api_request_args', $args, $endpoint );

        // TODO: Check response signatures on certain endpoints.
        return wp_safe_remote_request( $url, $args );
    }

wp-content/WOODEBUG.txt will shown content like below, if authentication failed:

WC_Helper_API::request
https://woocommerce.com/wp-json/helper/1.0/subscriptions
Array
(
    [authenticated] => 1
    [method] => GET
)

WC_Helper_API::request
https://woocommerce.com/wp-json/helper/1.0/update-check
Array
(
    [body] => {"products":[]}
    [authenticated] => 1
    [method] => POST
)

To debug without Docket Cache activated. Install and activate Transient Manager, and remove _woocommerce_helper_updates.

Thanks.

Thread Starter

(@kotyarashop)

@nawawijamili
Please tell me the details.

1. How to do it?

insert this code in WC_Helper_API::request()

2. What does it mean “Before:” and “After:”? Where (and when) to insert this code?

3. After that, open the wp-content/WOODEBUG.txt and send the text to you?

4. Transient Manager – this plugin?

Plugin Author

(@nawawijamili)

@kotyarashop

1. Open file wp-content/plugins/woocommerce/includes/admin/helper/class-wc-helper-api.php using Plugin Editor.

Plugins -> Plugin Editor.

– Select plugin to edit: WooCommerce
– And select includes -> admin -> helper -> class-wc-helper-api.php
– Go to line 47 you can see this code:

if ( ! empty( $args['authenticated'] ) ) {
			if ( ! self::_authenticate( $url, $args ) ) {
				return new WP_Error( 'authentication', 'Authentication failed.' );
			}
		}

– Insert this code:
file_put_contents(WP_CONTENT_DIR.'/WOODEBUG.txt',__METHOD__."\n".$url."\n".print_r($args,1)."\n", FILE_APPEND);

– before this code


return new WP_Error( 'authentication', 'Authentication failed.' );

– It should look like this:


file_put_contents(WP_CONTENT_DIR.'/WOODEBUG.txt',__METHOD__."\n".$url."\n".print_r($args,1)."\n", FILE_APPEND);
return new WP_Error( 'authentication', 'Authentication failed.' );

2. Before means the original code, After means edited code.

3. If an error happens wp-content/WOODEBUG.txt should have the debug info, like this:

WC_Helper_API::request
https://woocommerce.com/wp-json/helper/1.0/subscriptions
Array
(
    [authenticated] => 1
    [method] => GET
)

WC_Helper_API::request
https://woocommerce.com/wp-json/helper/1.0/update-check
Array
(
    [body] => {"products":[]}
    [authenticated] => 1
    [method] => POST
)

This debug info is prove that the issue is from WooCommerce not from Docket Cache.

4. Yes.

Thanks.

Thread Starter

(@kotyarashop)

Thank you.
I turned off Docket Cache plugin and now waiting for error.

Thread Starter

(@kotyarashop)

The error occurred again.
But the WOODEBUG.txt file did not appear.

Plugin Author

(@nawawijamili)

you can try,

go to line 59-60 and find this code


// TODO: Check response signatures on certain endpoints.
return wp_safe_remote_request( $url, $args );

replace with


// TODO: Check response signatures on certain endpoints.
$response = wp_safe_remote_request( $url, $args );
file_put_contents(WP_CONTENT_DIR.'/WOODEBUG.txt',__METHOD__."\n".$url."\n".print_r($args,1)."\n"."\n".print_r($response,1)."\n", FILE_APPEND);
return $response;

Thread Starter

(@kotyarashop)

@nawawijamili
Thanks! File is below.

Plugin Author

(@nawawijamili)

@kotyarashop

As you can see, this issue “WooCommerce update 403 Forbidden” is not related to Docket Cache. WooCommerce site can’t parse the data.


Server: nginx
Date: Thu, 03 Jun 2021 05:51:35 GMT
Content-Type: application/json; charset=UTF-8
Content-Length: 98
Connection: close
X-Robots-Tag: noindex
Link: <https://woocommerce.com/wp-json/>; rel="https://api.w.org/"
X-Content-Type-Options: nosniff
Access-Control-Expose-Headers: X-WP-Total, X-WP-TotalPages, Link
Access-Control-Allow-Headers: Authorization, X-WP-Nonce, Content-Disposition, Content-MD5, Content-Type
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Cache-Control: no-cache, must-revalidate, max-age=0
X-RateLimit-Limit: 300
X-RateLimit-Remaining: 298
X-RateLimit-Reset: 1622700000
Allow: POST
X-Woo-Signature: a3ec34b9bb1f35b2bc8a61a5ef21124c863a8eb4
Content-Encoding: gzip
X-rq: arn1 89 77 3174
Age: 0
X-Cache: pass

{"code":"invalid_request","message":"Could not parse the request.","data":{"status":403}}

That all I can help.

Thanks.

Thread Starter

(@kotyarashop)