unexpected status 403 Forbidden

[pedrosarkis]

What version of Codex is running?

0.77

What subscription do you have?

PRO

Which model were you using?

5.2

What platform is your computer?

wsl ubunt 22

What issue are you seeing?

HI, perform a git pull on the branch master.

Response: unexpected status 403 Forbidden: <title>Just a moment...</title><style>*{box-sizing:border-box;margin:0;padding:0}html{line-height:1.15;-webkit-text-size-
adjust:100%;color:#313131;font-family:system-ui,-apple-system,BlinkMacSystemFont,"Segoe UI",Roboto,"Helvetica
Neue",Arial,"Noto Sans",sans-serif,"Apple Color Emoji","Segoe UI Emoji","Segoe UI Symbol","Noto Color Emoji"}
body{display:flex;flex-direction:column;height:100vh;min-height:100vh}.main-content{margin:8rem auto;padding-
left:1.5rem;max-width:60rem}@media (width <= 720px){.main-content{margin-top:4rem}}.h2{line-height:2.25rem;font-
size:1.5rem;font-weight:500}@media (width <= 720px){.h2{line-height:1.5rem;font-size:1.25rem}}#challenge-error-
text{background-image:url("data:image/
svg+xml;base64,PHN2ZyB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciIHdpZHRoPSIzMiIgaGVpZ2h0PSIzMiIgZmlsbD0ibm9uZSI+
PHBhdGggZmlsbD0iI0IyMEYwMyIgZD0iTTE2IDNhMTMgMTMgMCAxIDAgMTMgMTNBMTMuMDE1IDEzLjAxNSAwIDAgMCAxNiAzbTAgMjRhMTEgMTEgMCA
xIDEgMTEtMTEgMTEuMDEgMTEuMDEgMCAwIDEtMTEgMTEiLz48cGF0aCBmaWxsPSIjQjIwRjAzIiBkPSJNMTcuMDM4IDE4LjYxNUgxNC44N0wxNC41Nj
MgOS41aDIuNzgzem0tMS4wODQgMS40MjdxLjY2IDAgMS4wNTcuMzg4LjQwNy4zODkuNDA3Ljk5NCAwIC41OTYtLjQwNy45ODQtLjM5Ny4zOS0xLjA1N
y4zODktLjY1IDAtMS4wNTYtLjM4OS0uMzk4LS4zODktLjM5OC0uOTg0IDAtLjU5Ny4zOTgtLjk4NS40MDYtLjM5NyAxLjA1Ni0uMzk3Ii8+PC9zdmc+
");background-repeat:no-repeat;background-size:contain;padding-left:34px}@media (prefers-color-scheme: dark)
{body{background-color:#222;color:#d9d9d9}}</style>

Enable JavaScript and cookies to continue

<script>(function()
{window._cf_chl_opt = {cvId: '3',cZone: 'chatgpt.com',cType: 'managed',cRay: '9b30ba699a2c5e5b',cH:
'7UDDuGmbbtni7DIqqHdjFfS5XrmHgK9oxT35EmKR98g-1766585908-1.2.1.1-
whmq4TW0GKSP_ib568qWhBo6us37aDDTfNZR78006VG7pM_7xKFTmUM.vKfbwwLF',cUPMDTk:"/backend-api/codex/responses?
oZOnap1MI7faVZD_s2y2W4gpLvjORmvHLeuXtIXk4dyKy.weWqET3PRD9oS5y07YFFF4AFpd4jnByTIKpyjeF11MqSLXOaQ7BmHFOEXi5VLfRKPPDwI
5oJsZwlE1foOrHQAwSLu.71FlHqndyYhnLHAPV5bde7cM2SZP_M.tJNG3rEuopsYZcivSHyz8ME0YtiKRDubf7fVKrayS5i9V75FAGUWg8XQ66jRp1z
7EHh9aAZ5bK5gXasPtnPtaMLSFAz1ACw9p1Rf8lUL6XFWOsVfiW0S.Pb0fNFKBhW0ExxyeP2HVnxaFaws8gRXAvcrooeHaZiLD4gm9t.bMRMaYnIOB9
kS.6LdRQ2B2BBYh5wrsJ4Ye_qr7fqJdFjG.Bve4CQZRDXqt0iJNG4l.UoQyDIm4aUcbvBrDCkY_IOVCuZA.fdiVjKy_yuvbRGO5b1Wv_Zk2uZxlaDmk
pQ_rk1uDvaOryUAvM7QwCa7ahXxnjDDC24EKWUpTMTHzEbVrUP_yT8c.0f8Hk9X9gBaF69Q73A_ela5hij_a7FFkCQp',mdrd: '',};var a =
document.createElement('script');a.src = '/cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?
ray=9b30ba699a2c5e5b';window._cf_chl_opt.cOgUHash = location.hash === '' && location.href.indexOf('#') !== -1 ?
'#' : location.hash;window._cf_chl_opt.cOgUQuery = location.search === '' && location.href.slice(0,
location.href.length - window._cf_chl_opt.cOgUHash.length).indexOf('?') !== -1 ? '?' : location.search;if
(window.history && window.history.replaceState) {var ogU = location.pathname + window._cf_chl_opt.cOgUQuery +
window._cf_chl_opt.cOgUHash;history.replaceState(null, null,"/backend-api/codex/responses?
__cf_chl_rt_tk=zVMRUF7MTH4JjsxVKUg3rs4Ru6Y7Nitr8dTtjdfHzNI-1766585908-1.0.1.1-
gaGPrKw2fwSkCBJTE0NJ5neZe24nhRlh6bYGdo7atcw"+ window._cf_chl_opt.cOgUHash);a.onload = function()
{history.replaceState(null, null, ogU);}}document.getElementsByTagName('head')[0].appendChild(a);}());</script></
body>, request id: 9b30ba699a2c5e5b-GRU

What steps can reproduce the bug?

Uploaded thread: 019b50b8-6f75

What is the expected behavior?

No response

Additional information

No response

[princedev-toptal]

This is likely a Cloudflare bot detection issue rather than a Codex bug.

[pedrosarkis]

This is likely a Cloudflare bot detection issue rather than a Codex bug.

i understand, but from a user perspective it makes no difference at all. i pay for codex and i haven’t been able to use it for more than 15 hours already. if the problem is with third parties, it doesn’t change the fact that

1. i have nothing to do with this and i can’t use the system i paid for
2. the error is not clear to the user

[princedev-toptal]

That makes sense. Let me check and get back to you.

…

On Wed, Dec 24, 2025 at 11:00 PM Pedro Penha Verani < ***@***.***> wrote: *pedrosarkis* left a comment (openai/codex#8516) <#8516 (comment)> This is likely a Cloudflare bot detection issue rather than a Codex bug. i understand, but from a user perspective it makes no difference at all. i pay for codex and i haven’t been able to use it for more than 15 hours already. if the problem is with third parties, it doesn’t change the fact that 1. i have nothing to do with this and i can’t use the system i paid for 2. the error is not clear to the user — Reply to this email directly, view it on GitHub <#8516 (comment)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/BKZLUFR3ECA7T7P7R5SHDS34DKS7VAVCNFSM6AAAAACP6B3PSOVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMZTMOJQGAZTKMRQGE> . You are receiving this because you commented.Message ID: ***@***.***>

[princedev-toptal]

1. Improved Cloudflare Challenge Detection
   File: codex-rs/core/src/error.rs
   Enhanced UnexpectedResponseError::friendly_message() to detect Cloudflare challenge pages by identifying common markers and providing clearer, actionable error messages, with tests added to validate challenge detection.
   File: codex-rs/core/src/api_bridge.rs
   Added specific handling for 403 Forbidden responses by detecting Cloudflare challenge pages, converting them into retryable Stream errors with a suggested 2-second retry delay, while preserving the request ID for debugging.
2. Cookie Store Support
   File: codex-rs/core/src/default_client.rs
   Enabled .cookie_store(true) on the reqwest client builder to persist and automatically send cookies, improving compatibility with Cloudflare session handling and authentication flows.
3. Browser-Like Headers
   File: codex-rs/core/src/default_client.rs
   Added browser-like request headers (Accept, Accept-Language, and Accept-Encoding) to make requests appear more human and reduce bot detection.

[etraut-openai]

From the logs, I can see that you are attempting to use codex from a region that is not currently supported. For a full list of supported regions, refer to this documentation.

[pedrosarkis]

From the logs, I can see that you are attempting to use codex from a region that is not currently supported. For a full list of supported regions, refer to this documentation.

Nope.. I'm using codex from the same region I use since August .

[pedrosarkis]

From the logs, I can see that you are attempting to use codex from a region that is not currently supported. For a full list of supported regions, refer to this documentation.

i don’t use a vpn, i don’t use a proxy, i don’t use anything. from one second to the next, starting yesterday, i suddenly couldn’t use codex anymore and started getting this error. it’s been almost 20 hours without being able to use it.

[pedrosarkis]

my ip is from brazil, as it has always been

[princedev-toptal]

From the logs, I can see that you are attempting to use codex from a region that is not currently supported. For a full list of supported regions, refer to this documentation.

Please review my PR

[etraut-openai]

@pedrosarkis, I think I was looking at the wrong log file. You didn't provide a full thread ID above. I was attempting to find your information using the truncated thread ID you provided. Please repro the problem and use the /feedback command to upload your logs, then paste the full thread ID here.

Also, I'm not sure what you mean by the statement "perform a git pull on the branch master." Are you having trouble pulling from the openai/codex git repo? Or are you having trouble using codex?