I am unable to register Toolset on our production WordPress site:
hidden link
The site is hosted on WP Engine and is running WordPress 7.1.1.
When attempting to register Toolset under Plugins > Add New > Commercial, the UI returns:
Unable to parse data from service response.
I connected directly to the WP Engine production environment through SSH and performed several tests.
A standard cURL request from the WP Engine environment succeeds:
curl -Iv hidden link
Result:
HTTP/2 200
server: nginx
I then tested the same endpoint through the WordPress HTTP API:
wp_remote_get("hidden link")
Result:
HTTP: 403
TYPE: text/html
Response:
<html>
<head><title>403 Forbidden</title></head>
<body>
<center><h1>403 Forbidden</h1></center>
</body>
</html>
I was able to reproduce the behaviour using cURL by sending the normal WordPress User-Agent:
curl -i -A "WordPress/7.1.1; hidden link" hidden link
Result:
HTTP/2 403
server: awselb/2.0
Finally, I tested wp_remote_get() again but changed only the User-Agent to Mozilla/5.0.
That request succeeded:
HTTP: 200
TYPE: text/html; charset=UTF-8
Response:
a:1:{s:5:"error";s:49:"Unknown or Unsupported API Call: repository_error";}
This appears to indicate that requests from our WP Engine environment are reaching api.toolset.com successfully, but requests using the standard WordPress User-Agent are being rejected with HTTP 403 before reaching the Toolset application.
Could your systems team please check whether an AWS load balancer/WAF/security rule is blocking requests from our site or WordPress User-Agent?
The affected production site is:
hidden link
Thank you.
