Status 403 under TOR

[moshpirit]

Yesterday I became root on my phone so I torified all my apps, including RedReader Beta, often I get an error telling me that I'm not allowed to do whatever I'm doing. When I see the details, looks like it's 403.

This is very weird because I've entered into Reddit tons of times on the desktop TOR browser and I never got this error.

[QuantumBadger]

This could be because Tor is regularly changing your IP, and reddit's oAuth stuff requires you to stay on a single IP.

It might be possible to work around this by re-authenticating for every single request. You could test this by modifying the following line:

https://github.com/QuantumBadger/RedReader/blob/master/src/main/java/org/quantumbadger/redreader/cache/CacheDownload.java#L98

From:

if(accessToken == null || accessToken.isExpired()) {

To:

if(true) {

Please let me know if that works :)

[moshpirit]

I'm not a developer, so I don't know how to create an APK with those changed lines :(

Thanks for your quick answer!

[moshpirit]

OK, I'm having some troubles with others apps and looks like forcing them to use TOR (individually) solve it. Maybe that would be a possible solution: adding a TOR support.

[QuantumBadger]

More discussion of this over here: #296

[QuantumBadger]

Tor support is now merged in (see alpha 21). The 403 errors are apparently still occurring though :(

[moshpirit]

Hmm ,that's weird! I've been using Diode these days and I had no issue :\ (of course under TOR)

Thanks for the update!

[SkewedZeppelin]

So I did eventually figure out the 403 issue. Its nothing to do with RedReader. The Reddit API actively blocks access from Tor. An easy workaround is setting your exit node country in Orbot to Australia or New Zealand (Only countries I've found so far that work).

[moshpirit]

This is not because of the exit node, but because of the amount of people that are connected using the same exit node

[SkewedZeppelin]

Either way, this issue can be closed as nothing can be done code-wise in RedReader to fix it.

[moshpirit]

But this is too weird. On TOR browser I don't have any issue, why should I have it with the API?

[QuantumBadger]

I've sent the admins an email about this. I'll let you know if I hear back!

[itmike]

I think this is because, like many other sites(eg. google), they require some extra "security" when they detect you are likly to use tor. Logging in with a 3rd party xmpp client to google over tor give you similar issues. :(