403 Forbidden

[Chris-tian123]

Description

• Request completely sent off
  < HTTP/1.1 403 Forbidden

To Reproduce

Steps to reproduce the behavior:

1. Run Lavalink.jar
2. Access it with this curl command: curl -v -H "Authorization: youshallnotpass" url:port/version
3. See error

Expected behavior

To get the version

Version info

Client used: Lavalink.jar

Output of java -version:

java version "1.8.0_401"
Java(TM) SE Runtime Environment (build 1.8.0_401-b10)
Java HotSpot(TM) 64-Bit Server VM (build 25.401-b10, mixed mode)

Lavalink Logs:

2025-06-15T13:16:51.056Z  WARN 13 --- [Lavalink] [  XNIO-1 task-2] l.s.config.RequestAuthorizationFilter    : Authorization failed for 190.103.177.162 on GET /version
2025-06-15T13:16:51.058Z  INFO 13 --- [Lavalink] [  XNIO-1 task-2] l.server.io.RequestLoggingFilter         : GET /version
2025-06-15T13:16:52.963Z  WARN 13 --- [Lavalink] [  XNIO-1 task-2] l.s.config.RequestAuthorizationFilter    : Authorization failed for 190.103.177.162 on GET /version
2025-06-15T13:16:52.964Z  INFO 13 --- [Lavalink] [  XNIO-1 task-2] l.server.io.RequestLoggingFilter         : GET /version
2025-06-15T13:16:54.427Z  WARN 13 --- [Lavalink] [  XNIO-1 task-2] l.s.config.RequestAuthorizationFilter    : Authorization failed for 190.103.177.162 on GET /version
2025-06-15T13:16:54.428Z  INFO 13 --- [Lavalink] [  XNIO-1 task-2] l.server.io.RequestLoggingFilter         : GET /version

java -jar Lavalink.jar --version

Version:        4.1.1
Build time:     05.06.2025 07:37:42 UTC
Branch          HEAD
Commit:         4238202
Commit time:    05.06.2025 07:11:37 UTC
JVM:            21.0.4
Lavaplayer      2.2.3

Additional context

Strange that only the owner of the hosting provider can access the lavalink api even if the port is open

curl output

C:\Users\Christian>curl -v -H "Authorization: youshallnotpass" http://{URL}:50011/version
* Host dv-n8.divahost.net:50011 was resolved.
* IPv6: (none)
* IPv4: {IP}
*   Trying {IP}:50011...
* Connected to {URL} (IP) port 50011
> GET /version HTTP/1.1
> Host: {URL}:50011
> User-Agent: curl/8.9.1
> Accept: */*
> Authorization: youshallnotpass
>
* Request completely sent off
< HTTP/1.1 403 Forbidden
< Connection: keep-alive
< Content-Length: 0
< Lavalink-Api-Version: 4
< Date: Sun, 15 Jun 2025 13:10:13 GMT
<
* Connection #0 to host {URL} left intact

[freyacodes]

Lavalink is telling you that you're using the wrong password. You supplied youshallnotpass

Moved to discussions as this is not a bug

[Chris-tian123]

I can assure you that the password is correct and there are no issues with my configuration

[freyacodes]

How can you assure that? Configuration issues are very common. You said that someone else is able to access your Lavalink. How are they doing that?

Also, I would advise you not to expose your Lavalink instance to the internet with an insecure password like that. Ideally your instance would be behind a firewall and using HTTPS

[Chris-tian123]

the hosting provider owner was able to access it idk how but even my friend can't. i will try local to see if there is a firewall

[Chris-tian123]

How can you assure that? Configuration issues are very common. You said that someone else is able to access your Lavalink. How are they doing that?

Also, I would advise you not to expose your Lavalink instance to the internet with an insecure password like that. Ideally your instance would be behind a firewall and using HTTPS

im using the same config as my friend and his lavalink instance is working

[devoxin]

Complete debug logs would be useful here