Skip to main content
The First Step
March 31, 2021
Question

403 error for APP in production

Our app works fine in Sandbox, however in Production it's throwing a 403 error. We're using the correct credentials for each environment, and have the phone numbers in E.164 format.

Any suggestions for steps that may also be needed to get approval on the app?

    3 replies

    The First Step
    March 31, 2021

    403 forbidden error occurs when the credentials are incorrect and authentication server reject the request. This is clearly a permission issue.

    Please check again

    casey-2The First StepAuthor
    The First Step
    April 1, 2021

    Hey, thanks for your answer. In our case no, because we are sure that the credentials ares fine, and we reset the password 2 times but we still can't login. We also tried from the reference API site and it returns 403. Actually from our script with the PHP SDK it returns this:

    * Connection #0 to host platform.ringcentral.com left intact

    Expected HTTP Error: Client error: `POST https://platform.ringcentral.com/restapi/oauth/token` resulted in a `400 Bad Request` response:

    {

    "error" : "invalid_grant",

    "errors" : [ {

    "errorCode" : "OAU-140",

    "message" : "Invalid resource owner cre (truncated...)


    This is from API reference site:

    403 Forbidden

    { "errorCode": "FeatureNotAvailable", "message": "El número de teléfono no pertenece a la extensión", "errors": [ { "errorCode": "MSG-304", "message": "El número de teléfono no pertenece a la extensión" } ] }


    Any ideas?

    PhongVu
    Community Manager
    Community Manager
    April 1, 2021

    The error you got from using the PHP SDK is purely because of wrong login credentials or there is some special characters in the password that were not escaped and it caused the problem.

    The error you got from the API reference means that you were trying to send SMS message from a phone number which does not belong to the extension you login the Dev portal. But at least it indicated that you were able to authenticated and call the API.