[Solved] Unable to authenticate UpdraftPlus plugin (403 Forbidden)

[oleglucic]

I was trying to connect updraftplus to google drive and on the last step there is redirect action that authenticates google account with updraft using token. Every time i go for auth i get 403 error. There is the error log but it won't help much.

[KazVee]

Could you please let us know what domain this is happening on, so we can try to help you a bit further?

[wolstech]

He only has one domain...I found the log. It's a few different things. First, Tommy's load is up at the moment, but it's also completely possible his WP install is too bloated and it just can't finish the task before Apache times out.

2025-01-28 18:11:00	Warning	2a06:5b03:300:2200:c52b:85e8:f763:6422		mod_fcgid: read data timeout in 45 seconds, referer: http://testingthis.helioho.st/wp-admin/options-general.php?action=updraftmethod-googledrive-auth&state=success%3As-f104f7d96c98f1d65cb192d4247aee16&access_token=eWEyOS5hMEFYZU84MFQtQ3lETTJXSWNBSUlyNjlSOXVfNk90V2UwZVdWTXVTT2sxTmZvT1NkVTlvS0U2bFVvVmU2ckpoWXlsVTgzS05FOVBVR2hOSXBnZXZTaEFURmxHR1NZQXh5VzBoRWRoMzdPZXYwS09QQTBjUDB0Z05qLTFkTmd5c2tKcXc0cjJRR0JnOE1xd2JJSkR4Szhtb25wSEowcjQwUDYzc1Z6UW1Cb2FDZ1lLQVRRU0FSQVNGUUhHWDJNaXBMc200ekFLZ1d6ZEN4eHdvR05tVlEwMTc1&user_id=ZTg4OTcyN2UzMTY2ODBhMTc2YmMzNjdiNjc3YzZjMTU3NmMxOGNiYmJiNTA0NjlkYWI4OTdmYjBkOWJkY2QwZA%3D%3D				Apache error

2025-01-28 18:11:00	Warning	2a06:5b03:300:2200:c52b:85e8:f763:6422		(110)Connection timed out: mod_fcgid: ap_pass_brigade failed in handle_request_ipc function, referer: http://testingthis.helioho.st/wp-admin/options-general.php?action=updraftmethod-googledrive-auth&state=success%3As-f104f7d96c98f1d65cb192d4247aee16&access_token=eWEyOS5hMEFYZU84MFQtQ3lETTJXSWNBSUlyNjlSOXVfNk90V2UwZVdWTXVTT2sxTmZvT1NkVTlvS0U2bFVvVmU2ckpoWXlsVTgzS05FOVBVR2hOSXBnZXZTaEFURmxHR1NZQXh5VzBoRWRoMzdPZXYwS09QQTBjUDB0Z05qLTFkTmd5c2tKcXc0cjJRR0JnOE1xd2JJSkR4Szhtb25wSEowcjQwUDYzc1Z6UW1Cb2FDZ1lLQVRRU0FSQVNGUUhHWDJNaXBMc200ekFLZ1d6ZEN4eHdvR05tVlEwMTc1&user_id=ZTg4OTcyN2UzMTY2ODBhMTc2YmMzNjdiNjc3YzZjMTU3NmMxOGNiYmJiNTA0NjlkYWI4OTdmYjBkOWJkY2QwZA%3D%3D

Second, there's these access denied errors. His WP extension is trying to change a server-wide setting and is failing because users aren't allowed to change those.

mod_fcgid: stderr: WordPress database error Access denied; you need (at least one of) the SUPER privilege(s) for this operation for query SET GLOBAL max_allowed_packet=33554432 made by do_action('wp_ajax_updraft_ajaxrestore'), WP_Hook->do_action, WP_Hook->apply_filters, UpdraftPlus_Admin->updraft_ajaxrestore, UpdraftPlus_Admin->prepare_restore, UpdraftPlus_Admin->restore_backup, Updraft_Restorer->perform_restore, Updraft_Restorer->restore_backup, Updraft_Restorer->restore_backup_db, UpdraftPlus->max_packet_size, referer: http://testingthis.helioho.st/wp-admin/options-general.php?action=updraftmethod-googledrive-auth&state=success%3As-f104f7d96c98f1d65cb192d4247aee16&access_token=eWEyOS5hMEFYZU84MFQtQ3lETTJXSWNBSUlyNjlSOXVfNk90V2UwZVdWTXVTT2sxTmZvT1NkVTlvS0U2bFVvVmU2ckpoWXlsVTgzS05FOVBVR2hOSXBnZXZTaEFURmxHR1NZQXh5VzBoRWRoMzdPZXYwS09QQTBjUDB0Z05qLTFkTmd5c2tKcXc0cjJRR0JnOE1xd2JJSkR4Szhtb25wSEowcjQwUDYzc1Z6UW1Cb2FDZ1lLQVRRU0FSQVNGUUhHWDJNaXBMc200ekFLZ1d6ZEN4eHdvR05tVlEwMTc1&user_id=ZTg4OTcyN2UzMTY2ODBhMTc2YmMzNjdiNjc3YzZjMTU3NmMxOGNiYmJiNTA0NjlkYWI4OTdmYjBkOWJkY2QwZA%3D%3D

 

[oleglucic]

The problem's been resolved by @Krydos. Thank you : )

[Krydos]

For anyone who searches and has the same issue, the problem was the plugin was passing the scope via the URL like this

...&scope=userinfo.profile+...

and mod_security was blocking it because it contained the string .profile. The solution is either to disable that mod_security rule on the domain, or change the plugin so it doesn't pass that particular scope variable via the URL.