Embed Twitter block doesn't work, returns error "Sorry, you are not allowed to make proxied oEmbed requests."

[Melatti]

Description

Running a fresh new Wordpress 6.2.2 install on a just created DigitalOcean Wordpress App, I can't embed any Twitter post. No plugins, default theme, no proxies, no changes at all.

I'm the administrator and the only user registered, so I do have edit_posts capability.

When I paste some URL gives me: Sorry, this content could not be embedded.

Opening /index.php?rest_route=%2Foembed%2F1.0%2Fproxy&url=https%3A%2F%2Ftwitter.com%2Foutcontextfelca%2Fstatus%2F1663685978366541826&_locale=user (can be any twitter post URL) in new browser window I can see:

{"code":"rest_forbidden","message":"Sorry, you are not allowed to make proxied oEmbed requests.","data":{"status":401}}

And just to be sure, I've re-installed Wordpress version 6.2.2, no changes.

Tested on Chrome and Firefox.

I would really appreciate if you have any solutions.

Step-by-step reproduction instructions

1. Paste any Twitter post URL in the content edit page.

Screenshots, screen recording, code snippet

No response

Environment info

No response

Please confirm that you have searched existing issues in the repo.

Yes

Please confirm that you have tested with all plugins deactivated except Gutenberg.

Yes

[aurooba]

Hi @Melatti, you're right that if you visit /index.php?rest_route=%2Foembed%2F1.0%2Fproxy&url=https%3A%2F%2Ftwitter.com%2Foutcontextfelca%2Fstatus%2F1663685978366541826&_locale=user you'll see the 401 error, because you're accessing the rest route as an unauthenticated user there.

I tested the exact twitter url you shared https://twitter.com/outcontextfelca/status/1663685978366541826, and was able to embed it in the Block Editor when logged in as an admin.

It's possible that the oEmbed that was cached was damaged. You could try using WP CLI to clear the oEmbed cache by running the following command in the root of your WordPress installation: wp embed cache clear. After that, please try embedding the tweet in a brand new post/page.

[Melatti]

Hi @aurooba,

Thank you for the tips, but I'm affraid this is incorrect, how could I be unauthenticated user if I'm inserting a post? And I'm sure I have administrator role.

I've tried again with a brand new installation and used your tip but again, no luck, the problem remains.

I've recorded it, and can be viewed here: https://youtu.be/8oiEgJvUtmg.

After that, just to be sure, I've tried again after deactivating and deleting Fail2ban plugin, nothing changed.

Could you please give more information about your environment?

I've tried with several Wordpress websites and it doesn't work on any of them.

[github-actions]

Hi,
This issue has gone 30 days without any activity. This means it is time for a check-in to make sure it is still relevant. If you are still experiencing this issue with the latest versions, you can help the project by responding to confirm the problem and by providing any updated reproduction steps.
Thanks for helping out.

[Melatti]

Yes, it is still relevant.

[github-actions]

Hi,
This issue has gone 30 days without any activity. This means it is time for a check-in to make sure it is still relevant. If you are still experiencing this issue with the latest versions, you can help the project by responding to confirm the problem and by providing any updated reproduction steps.
Thanks for helping out.

[mt8]

I tested this issue.
I've embedded humanity's first tweet.
https://x.com/jack/status/20?s=20

Interestingly, I got an error in WordPress Playground, but not in WordPress, which I host myself.