AASA - 403 Forbidden

Hello, we encountered a 403 error while accessing AASA.

> curl -i 'https://app-site-association.cdn-apple.com/a/v1/finture.id'

HTTP/1.1 404 Not Found
Content-Type: text/plain; charset=utf-8
Content-Length: 10
Connection: keep-alive
Server: nginx
Date: Fri, 28 Feb 2025 03:17:02 GMT
Expires: Fri, 28 Feb 2025 03:17:12 GMT
Age: 1122
Apple-Failure-Details: {"status":"403 Forbidden"}
Apple-Failure-Reason: SWCERR00101 Bad HTTP Response: 403 Forbidden
Apple-From: https://finture.id/.well-known/apple-app-site-association
Apple-Try-Direct: false
Via: https/1.1 jptyo12-3p-pst-007.ts.apple.com (acdn/14454.1), http/1.1 jptyo12-3p-pac-027.ts.apple.com (acdn/14454.1), https/1.1 jptyo12-3p-pfe-014.ts.apple.com (acdn/14454.1)
X-Cache: MISS KS-CLOUD
CDNUUID: 51e5b30b-1f3c-4778-bb6f-cff5447ad763-1988011596
x-link-via: ntct03:443;xianymp018:443;gzct61:443;xg36:443;
x-b2f-cs-cache: no-cache
X-Cache-Status: MISS from KS-CLOUD-XG-FOREIGN-36-07
X-Cache-Status: MISS from KS-CLOUD-GZ-CT-61-05
X-Cache-Status: MISS from KS-CLOUD-XIANY-MP-018-25
X-Cache-Status: MISS from KS-CLOUD-NT-CT-03-03
X-KSC-Request-ID: f1f2bf47e4b7e7b93596bbe7d60b1583
CDN-Server: KSFTF
X-Cdn-Request-ID: f1f2bf47e4b7e7b93596bbe7d60b1583

Not Found

But we can access https://finture.id/.well-known/apple-app-site-association.

How should we solve this, thank you.

Answered by DTS Engineer in 827484022

Thanks for the post, it looks like Apple can’t access to your link, due your are filtering against bots.

A normal request returns the correct AASA file.

 curl -v  https://finture.id/.well-known/apple-app-site-association

However, when I add a random agent like:

 curl -A "MyAgent-Bot/*" https://finture.id/.well-known/apple-app-site-association

I get this response: {"message":"Forbidden"}%      

Please make sure your server settings allow all IP addresses as well as all UserAgents on the request.

Hope this helps

Albert Pascual
  Worldwide Developer Relations.

Accepted Answer

Thanks for the post, it looks like Apple can’t access to your link, due your are filtering against bots.

A normal request returns the correct AASA file.

 curl -v  https://finture.id/.well-known/apple-app-site-association

However, when I add a random agent like:

 curl -A "MyAgent-Bot/*" https://finture.id/.well-known/apple-app-site-association

I get this response: {"message":"Forbidden"}%      

Please make sure your server settings allow all IP addresses as well as all UserAgents on the request.

Hope this helps

Albert Pascual
  Worldwide Developer Relations.

AASA - 403 Forbidden
 
 
Q