[BUG] CloudFlare asks for CAPTCHA test for certain API calls

[The Northern Light]

Hi,

Some of my scripts have been running into the following problem recently (I think it's been the last five days or so):

A page from CloudFlare shows up saying that I (or my script at least) need to complete a CAPTCHA test to access NationStates.

It seems to only happen for certain API calls deterministically, but I haven't been able to discern a pattern. Most of the ones I detected that trigger the page are about getting tokens to update existing dispatches through the private API. (Though note that many other similar dispatch-editing calls make it through to the API successfully, and I am not sure what is special about the ones that fail.)

For example, one that consistently triggers the error is a call for a token to edit this dispatch. The CloudFlare page mentions a "Cloudflare Ray ID: 581abe5b7e58ea6e", in case this is helpful.

Could this be looked into please? Given that the API is by definition intended for scripts, having CloudFlare randomly ask for CAPTCHA tests is rather problematic.

Thanks in advance!

[[violet]]

I've tweaked the settings--hopefully the API is exempt from these checks now. Please let me know if you run into them again there.

[The Northern Light]

Unfortunately, the issue remains. All of the cases I had found that triggered the CAPTCHA test still do so.

[The Northern Light]

As a note, when I tried to manually edit the same dispatch I reported in the OP, I still received the CAPTCHA test.

[The Northern Light]

[violet], I don't know whether the changes you made in this thread were also meant to help with API requests. However, the CAPTCHA test still shows up for the same API calls I had discovered in the OP.

[The Northern Light]

Hi,

I am sorry to quadruple-post, but I wanted to bring this thread back to the first page.

This issue remains and, as there is no way for scripts to complete the CAPTCHA test (it is, after all, designed to detect humans vs scripts), it is very disruptive.

Would it please be possible to take another look and try to prevent the CAPTCHA tests from affecting API calls?

Thanks a lot!

[Recuecn]

I'd like to second TNL's request here. I use both the market dispatch TNL publishes, as well as Trotterdam's issues result page, just two of the (very useful) api tools some people have created, and I don't know if TNL's card tools specifically are being hurt by the captchas, but I know that Trotterdam's page is. Is it possible for this to be a priority?

[[violet]]

[violet], I don't know whether the changes you made in this thread were also meant to help with API requests. However, the CAPTCHA test still shows up for the same API calls I had discovered in the OP.

The API is (supposedly) whitelisted and you should never encounter a CloudFlare check there. If you do, please post / GHR / email an example curl request that triggers it, along with some detail about the error (a screenshot is perfect). The CloudFlare Ray ID isn't relevant but the exact error message is.

[The Northern Light]

Hi,

Unfortunately, this issue remains. As [violet] requested, I have submitted a detailed GHR, including some code reproducing the error.

Thanks,
TNL.

[[violet]]

Thanks, that helped me track down a problem with API whitelisting. You should never encounter a CloudFlare check there; let me know if you do.

[The Northern Light]

I re-run my dispatch updating script and it didn't run into any issues. Thanks a lot [violet]!

[Jaydonian]

Even when I do pass the captcha, it always fails my security check. When I try again, the same stupid captcha appears again and the same thing happens. I don't know how to solve it. Can someone help?