Information

Error Message: "403 - You are not authorized"

Cause: The error occurs when using an OAuth 2.0 Client Credentials (cc_hash) access token in an anonymous context, which lacks the necessary permissions to access protected resources in a private Khoros community.

Resolution Steps

1. Verify API App Configuration:
   • Ensure your API app is created as a "Bulk Data API" app with the Analytics role.
   • Navigate to Account > Dev Tools > Create App in your community admin UI.
2. Generate Access Token:
   • Use the OAuth 2.0 Client Credentials grant flow with the shared key from the app to generate your access token.
   • POST to https://<your_community_domain>/t5/s/api/2.1/auth/accessToken.
3. Submit Export Calls:

   curl --location 'https://<your_community_domain>/t5/s/api/2.1/analytics/bulk/export?bda.fromDate=YYYY-MM-DD&bda.toDate=YYYY-MM-DD' --header 'Authorization: Bearer [ACCESS_TOKEN]' --header 'Accept: application/json'

   • Ensure the app has the Analytics role; a 403 error indicates a lack of required permissions.
4. Alternative for Protected API Access:
   • Use the OAuth 2.0 Authorization Grant flow to obtain a user-scoped token for accessing protected API v2.1 endpoints.
   • Ensure the user account has the appropriate Analytics permissions.

Important: Use only API v2.1 endpoints for Aurora communities, as API v2.0 is not supported and may cause errors.

Verification:

• Confirm that the API app is correctly configured and that the access token is generated with the appropriate permissions.
• Test the export call to ensure no authorization errors occur.

Note: If issues persist, verify the app type and permissions in Dev Tools, and ensure roles align with your use case.