App password don't work for all API endpoints

[Jos Last]

Hello,

I use the API in combination with the app password. When i call the following url I get a response:

https://api.bitbucket.org/2.0/repositories/{MY-WORKSPACE}/{MY_REPO}/commits/?include=master

But when I call this url, I get a http_status 403. Does anyone know why?

https://api.bitbucket.org/2.0/repositories/{MY-WORKSPACE}/{MY_REPO}/diffstat/87d4d49

[seanaty · Accepted solution]

Both of these APIs should require the same level of permission. 403 is the response that you'd get if passed in no authorization whatsoever (for a private repository). It is indeed odd that one of them would 200 while the other returns 403. I would check script for any typos.

[Jos Last]

Thanks for the confirmation! Seems to have something todo with my code or request in PHP. When I run the request in postman with the same authentication method the request succeed. So will dive in to my code and figure this one out :)

Thanks for the quick response!