403 Error for third-party API request

[DOB]

Hi everyone,

We have a logistics company who are integrating with our inventory and orders via private app API. The last private app we set up with API is working fine (performing a similar function in terms of permissions/access for another shipping company). Despite having the same permissions, the second app is getting the following error via post request:

https://ourstore.myshopify.com/admin/api/2020-01/orders/2070733422672/fulfillments.json (403) Not allowed

Their request contained the following parameters:

{"fulfillment":{"tracking_company":"DPD - DPD","location_id":35954458704,"tracking_numbers":["0147Test123"],"notify_customer":true,"tracking_urls":["https://tracking.dpd.de/cgi-bin/delistrack?pknr=0147Test123&typ=32&lang=de"],"line_items":null}}

Any idea what might be causing the 503 error?

[hassain]

Hey @DOB ,

Can you provide the value of the "X-Request-ID" header from the 403 Error Response from Shopify? With this value I can go through our platform logs and see why this error was thrown