Access from Canada no longer allowed?

LJHarb

unread,

Oct 25, 2012, 12:14:19 AM10/25/12

to google-apps-la...@googlegroups.com

Hi - my startup's server is in Canada, and all of a sudden, when using the python script that works fine from our dev machines in the US, we get the following response:

<!DOCTYPE html><html lang=en><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 403 (Forbidden)!!1</title><style>*{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px}* > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}</style><a href=//www.google.com/><img src=//www.google.com/images/errors/logo_sm.gif alt=Google></a><p><b>403.</b> <ins>Thatâ€™s an error.</ins><p>Your client does not have permission to get URL <code>/js/get_details?is_public=false&oauth_signature_method=HMAC-SHA1&shortcut=foo&timestamp=1351138233.0&url=None&user=None&oauth_signature=GgH05l1yZPFZkYM8uix96GRrbP8%3D</code> from this server. (Client IP address: xx.xx.xx.xx)<br><br>

We're sorry, but this service is not available in your country.

Is this new? What's wrong with Canada?

LJHarb

unread,

Oct 25, 2012, 12:33:07 AM10/25/12

to google-apps-la...@googlegroups.com

In addition, I can no longer locate the admin section for Short Links - the service doesn't appear anywhere in the Google Apps console at all.

Searching implies there's an IP whitelist in the same place I originally set an API key but I can't locate it.

Is the service being shut down?!? If not, why doesn't it show up in the apps dashboard?

- Jordan

Jens Scheffler

unread,

Nov 1, 2012, 12:52:47 PM11/1/12

to google-apps-la...@googlegroups.com

Hi,

You're using the API, right? Without disclosing any proprietary code, can you share the snippet that generates the request?
What timezones are your servers in? Requests are only handled if the timestamp is less than 30 minutes from the current time, so that could be a source of issues. Since the script works from your local machine (is that in the same timezone?), I assume it's not an encryption / hmac signing issue.

Cheers,

Jens

LJHarb

unread,

Nov 2, 2012, 5:13:47 PM11/2/12

to google-apps-la...@googlegroups.com

Hi Jens -

Thanks so much for your reply. Just `curl -i http://apps.mobbase.com/all` - if you get a 301, it worked, a 403, it didn't.

I've verified that the system time is correct. My local machines are in California, and they work just fine.

I've verified with my network provider in Montreal that it's just broken inside our network provider. I don't yet know what's changed, and I'll update here when I do. However, since it's Google returning the response, I'm assuming something in App Engine is being too restrictive? Please note that the same problem is occurring on the Google Play publisher's console, so if that's running on AppEngine as well, that would make sense.

- Jordan

Reply all

Reply to author

Forward