403 Forbidden error creating a VCard via CardDAV API

matt wynne · 26 Nov 2023, 02:24 PM

Hi,

I have some scripts that were previously working, but have recently started receiving a 403 Forbidden error.

They authenticate using Basic auth, with a username of "<name>+Default@<domain>" and a password generated on the "App password" screen in the settings.

I swear these scripts have been working, and I swear I haven't changed anything. The initial login and fetch of address books still work fine, but when I try to create a VCard it fails with a 403 response.

Here's what I'm posting:

URL: https://carddav.fastmail.com/dav/addressbooks/user/<username>@<domain>/Default/160b5b7f-7e72-42a1-b672-67a3d024e303.vcf

BEGIN:VCARD
VERSION:3.0
UID:160b5b7f-7e72-42a1-b672-67a3d024e303
EMAIL:test@example.com
N:
FN:
REV:2023-11-25T17:23:35.443Z
END:VCARD

Can anyone see where I'm going wrong? Did something change at Fastmail around this stuff in the last few weeks?

Thanks in advance for any help!

matt wynne · 26 Nov 2023, 03:28 PM

I've been trying this out with curl.

In the response, I can see this:

Code:

<D:error xmlns:D="DAV:" xmlns:C="urn:ietf:params:xml:ns:carddav">
  <C:valid-address-data/>
  <D:responsedescription>Failed restriction checks</D:responsedescription>
</D:error>

Any idea what that means?

26 Nov 2023, 02:24 PM	#1
matt wynne Junior Member Join Date: Mar 2004 Posts: 15	403 Forbidden error creating a VCard via CardDAV API Hi, I have some scripts that were previously working, but have recently started receiving a 403 Forbidden error. They authenticate using Basic auth, with a username of "<name>+Default@<domain>" and a password generated on the "App password" screen in the settings. I swear these scripts have been working, and I swear I haven't changed anything. The initial login and fetch of address books still work fine, but when I try to create a VCard it fails with a 403 response. Here's what I'm posting: URL: https://carddav.fastmail.com/dav/addressbooks/user/<username>@<domain>/Default/160b5b7f-7e72-42a1-b672-67a3d024e303.vcf BEGIN:VCARD VERSION:3.0 UID:160b5b7f-7e72-42a1-b672-67a3d024e303 EMAIL:test@example.com N: FN: REV:2023-11-25T17:23:35.443Z END:VCARD Can anyone see where I'm going wrong? Did something change at Fastmail around this stuff in the last few weeks? Thanks in advance for any help! Last edited by matt wynne : 26 Nov 2023 at 03:27 PM. Reason: clean up example

26 Nov 2023, 03:28 PM	#2
matt wynne Junior Member Join Date: Mar 2004 Posts: 15	I've been trying this out with curl. In the response, I can see this: Code: <D:error xmlns:D="DAV:" xmlns:C="urn:ietf:params:xml:ns:carddav"> <C:valid-address-data/> <D:responsedescription>Failed restriction checks</D:responsedescription> </D:error> Any idea what that means?