A person
Hi, I have a lot of trouble accessing my account with kinde auth. I get error 403 forbidden and I haven't done anything wrong, I don't know what happened, I appreciate yesterday morning out of nowhere
5 Replies
Hi,
Thanks for letting us know. A 403 Forbidden error can happen for a few different reasons, so I’d like to gather a bit more information to help troubleshoot:
Are you seeing the 403 error during login/authentication or when calling a specific API endpoint after login?
Which SDK or integration method are you using (e.g., JavaScript, React, PHP, Node, etc.)?
Is this happening for all users , or just your account?
If possible, could you share a screenshot or error log (with any sensitive info removed) so we can see the exact response?
Once we have these details, we’ll be able to narrow down whether this is a configuration issue, a permissions problem, or something else.
Hi, if I see it during Authentication, when I want to log in. I'm not quite sure, I think we use JavaScript, It happens to every device in my home, not just mine. And yes, I'll share a screenshot of what I get when I try to log in
This is what comes out, you could really think it's "traffic" but no. Appears on all devices, "403 forbidden error" So, I don't know what to do, I tried everything, clear cache, etc.
Thanks for sharing the screenshot and details. The error you’re seeing (403 ERROR – The request could not be satisfied) is returned by CloudFront, which means the request is getting blocked before reaching Kinde.
Since you mentioned:
* It happens during authentication (when logging in).
* It affects all devices on your home network.
* You’re likely using the JavaScript SDK.
That points to it being network-related rather than a device/browser issue.
Possible causes:
1. ISP or network blocking – Your ISP/home router may be blocking CloudFront requests.
2. Firewall / DNS filtering – If you’re behind a VPN, proxy, or firewall, CloudFront requests could be blocked.
3. Incorrect login domain – Make sure your app is redirecting to your Kinde tenant domain (e.g. myapp.kinde.com) and not directly to kinde.com. Direct calls to kinde.com for login are not valid.
4. CORS or redirect misconfiguration – If your app redirects to the wrong domain, CloudFront will reject it.
If it still fails, could you share your Kinde domain so we can check our side for any blocked requests?