Error 405

May 1, 3:22 AM

Offline

Jul 2017

Hello,

I have successfully implemented the OAuth2 PKCE authorization flow as described in your official blog post.

The browser opens correctly and redirects to http://localhost:8080 with a valid code

I then attempt to exchange the code for an access_token via a POST request to https://myanimelist.net/v1/oauth2/token

However, I consistently receive a 405 Forbidden error with an HTML page asking for “Human Verification” (which includes AWS WAF CAPTCHA scripts)

I have tried the following with no success:

Using valid client_id, client_secret, and matching code_verifier

Testing from different IP addresses and environments (with and without VPN)

Adding appropriate headers (User-Agent, Content-Type)

Using curl, requests, httpx, and Postman

Until recently, this flow worked perfectly. Now the token request is blocked as if it were automated traffic.

Is this an intentional security update?
Is there any documented way to bypass the CAPTCHA in an OAuth2-compliant and approved manner?

Thank you in advance for your help and clarification.

May 1, 9:47 AM

shalevc1098

Offline

May 2020

glad i'm not the only one with this issue

May 1, 11:49 AM

CreeperGames

Offline

Apr 2021

Same issue here, it appears that I am getting a lot of errors, but some of my requests go through without any problem.

May 1, 6:29 PM

Xirei

Offline

Sep 2022

Same here. Code which was working fine for 2 years is now randomly getting a 405 Method not allowed. Did something change in the API ?

May 2, 1:38 AM

shalevc1098

Offline

May 2020

Reply to Xirei

Same here. Code which was working fine for 2 years is now randomly getting a 405 Method not allowed. Did something change in the API ?

@Xirei i think they have an issue that somehow there is a captcha for the /token url, sometimes preventing users from getting their token. hope it would get fixed soon

May 2, 4:18 AM

Anto00125

Offline

Jul 2017

Now it works guys...

Edit: nvm it only lets me get the TOP 1000 mangas, not the user data.

See All Discussions

More topics from this board

» I built a spotify-styled 'MyAnimeList Wrapped' for a yearly review of your anime and manga XAvishkar - Dec 14	1	by Joeliazeers »» Dec 17, 1:01 PM
» [Repost] list of all relation_type and media_type. Mr_UnknownOtaku - Dec 8	4	by -DxP- »» Dec 12, 8:43 AM
» How to get author name? EdibleMuffin - Feb 12	4	by XAvishkar »» Dec 8, 9:52 AM
» 401 Unauthorized when doing authorization flow Konng_ - Nov 16	2	by Konng_ »» Nov 28, 3:24 PM
» [discontinued] I made a webapp to compare plan-to-watch lists daux - Apr 16, 2022	33	by daux »» Oct 2, 4:17 PM

Error 405

More topics from this board

» I built a spotify-styled 'MyAnimeList Wrapped' for a yearly review of your anime and manga

» [Repost] list of all relation_type and media_type.

» How to get author name?

» 401 Unauthorized when doing authorization flow

» [discontinued] I made a webapp to compare plan-to-watch lists

MoreTop Anime

MoreTop Airing Anime

MoreMost Popular Characters