Cloudflare's Bot Filter, Not Bad Credentials, Was Blocking Python API Requests

·2 views

A developer spent over an hour troubleshooting repeated 403 errors while building a Python-based API client, assuming the problem was an invalid or misconfigured API key. The real cause was Cloudflare's browser-integrity check (error 1010), which silently blocked every request at the network edge before it ever reached the vendor's authentication layer. Python's default User-Agent string, 'Python-urllib/3.x', was enough to trigger the ban, making all credential variants fail identically. Adding four browser-mimicking HTTP headers — including a standard Chrome User-Agent — allowed requests to pass through Cloudflare and reach the actual API, which then returned a proper 401 for invalid credentials. The developer notes a broader diagnostic principle: when varied inputs produce identical error outputs, the inputs are not being read, signalling that a proxy or intermediary layer is intercepting traffic.

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

How to Extract PDF Form Field Data in Bulk Using C# and Free Spire.PDF

Enterprise workflows frequently rely on PDF forms for data collection, requiring automated extraction of field values for storage and processing. A tutorial on DEV Community demonstrates how to read interactive PDF form fields — including text boxes, checkboxes, radio buttons, list boxes, and combo boxes — using C#. The approach uses the free Spire.PDF for .NET library, which provides the PdfFormWidget class to access and iterate over all form fields in a document. Developers can install the library via NuGet and retrieve field values by casting each field to its specific widget type. The guide also notes limitations such as the free version's 10-page cap and the need for separate handling of XFA-based PDF forms.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

How Differential Privacy and Federated Learning Can Secure Health Data

A technical guide published on DEV Community outlines how developers can build a decentralized health data platform that protects user privacy using differential privacy and federated learning. The approach relies on two open-source libraries, PySyft and Opacus, to process sensitive biometric data — such as heart rate and step counts from Google Health Connect — directly on users' devices without exposing raw records. Mathematical noise is injected into local model gradients before any data leaves the device, ensuring that no individual's personally identifiable information is transmitted to a central server. The system uses gradient clipping alongside Laplacian noise to satisfy the formal epsilon-delta differential privacy guarantee, making it mathematically impossible for an attacker to confirm whether a specific user's data influenced the model. The guide targets Python developers with a background in basic statistics and demonstrates the workflow through a simulated health dataset and logistic regression model built with PyTorch.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Cursor Launches Google Workspace Plugins for Gmail, Drive, and Calendar

Cursor released Google Workspace plugins on August 3, 2026, enabling coding agents to interact with Gmail, Google Drive, and Google Calendar directly within the IDE. The plugins connect to Google's remote MCP endpoints, which remain in Developer Preview, meaning available tools may differ from what marketing materials describe. Security guidance recommends installing one plugin at a time using a low-impact test account, rather than connecting accounts holding sensitive customer, financial, or production data. Developers are advised to verify the live authenticated tool inventory via tools/list, since observed capabilities — such as Gmail offering draft creation but no send tool — may not match product descriptions. As Google's MCP servers are still in preview, tool inventories should be rechecked after every plugin or server update.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Developers Add Native GCP Cloud Spanner Support to KEDA Autoscaler

A team running Kubernetes workloads that process jobs stored in Google Cloud Spanner tables built and contributed a new native Spanner scaler to KEDA, the open-source Kubernetes Event-Driven Autoscaling framework. The scaler allows Kubernetes to automatically adjust worker replica counts based on actual database queue depth, using any custom SQL query that returns a single integer value. Prior to this contribution, KEDA supported other GCP services such as Pub/Sub and Cloud Tasks, but lacked a Spanner integration. The implementation supports all three GCP authentication methods and is accompanied by 18 unit tests, 6 integration tests against the Cloud Spanner emulator, and an end-to-end test against a real Spanner instance. The pull request has been submitted to the official KEDA repository and documentation is available on keda.sh.

0 comments Read more at DEV Community