Azure API Management
An Azure service that provides a hybrid, multi-cloud management platform for APIs.
Don't Use the Python requests library's User-Agent, It is not safe.
APIM & Python requests library issue
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(105.60000000000001, 26%, 20%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EWY%3C/text%3E%3C/svg%3E)
Wang Yekindar
0
Reputation points
Hello team,
I am sending a request to APIM with the Python requests library, but I got a 403 forbidden error. And if I use the User-Agent: "123" or other alternatives instead of the Python requests library's default User-Agent: "python-requests/{version}", I will get a 200 response. Can you explain this issue to me? Thanks
Azure API Management
-
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(73.60000000000001, 77%, 17%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ERM%3C/text%3E%3C/svg%3E)
Rakesh Mishra 8,345 Reputation points Microsoft External Staff Moderator2025-07-24T17:22:09.04+00:00 Hi Wang Yekindar, please share the following details to help us investigate further:
- Do you have any inbound policies set up to validate headers?
- Is User-Agent field in header mandatory for your API?
- Can you troubleshoot the API by enabling the APIM trace as mentioned in the documentation here.
- Try troubleshooting the issue by using the built-in detectors under diagnose and solve problems blade of your APIM instance from portal.
If you are still facing the issue I have reached out to you over private messages. Could please check and help me with the requested information.
We’ll take a closer look and assist you accordingly.
-
Wang Yekindar 0 Reputation points
2025-07-25T01:40:38.0433333+00:00 Hi Rakesh Mishra,
Hope this message finds you well.
After investigation, I found there are no inbound policies in APIM about
User-Agent. AnyUser-Agentwill be ok, but the Python requests library can't. So I'm now changing it (User-Agent) to our business info. I have also seen the same issue on Stack Overflow. Sorry, but I couldn't find the same issue right now.
Could you pls investigate this from your side if you have free time? Thank you very much! -
Rakesh Mishra 8,345 Reputation points Microsoft External Staff Moderator
2025-07-25T07:05:59.3533333+00:00 @Wang Yekindar , could you please check and provide the requested details in private messages to help you further.
Sign in to comment