# 403 forbidden error on postman api call

**URL:** <https://forum.ghost.org/t/403-forbidden-error-on-postman-api-call/6017>\
**Category:** Developer help\
**Created:** [March 4, 2019, 3:21pm UTC](https://forum.ghost.org/t/403-forbidden-error-on-postman-api-call/6017 "2019-03-04T15:21:42Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![aleksanderbodurri](https://avatars.discourse-cdn.com/v4/letter/a/e9a140/32.png) [@aleksanderbodurri](https://forum.ghost.org/u/aleksanderbodurri)\
**Post date:** [March 4, 2019, 3:21pm UTC](https://forum.ghost.org/t/403-forbidden-error-on-postman-api-call/6017/1 "2019-03-04T15:21:42Z")

</div>

I retrieved client id and client secret from the sqlite3 clients table and made a get request to  
`http://localhost:8080/ghost/api/v0.1/posts/?client_id=ghost-frontend&client_secret=<client_secret>`  
but the result status was 403 with the following message:

```auto
{
    "errors": [
        {
            "message": "Please Sign In",
            "errorType": "NoPermissionError"
        }
    ]
}

```

I’m running ghost through docker and I do not have “Make this site private” checked off in the admin settings.

Any help is very much appreciated :]

---

<div class="post-metadata">

**Author:** ![Kevin](https://sea1.discourse-cdn.com/flex015/user_avatar/forum.ghost.org/kevin/32/32_2.png) [@Kevin](https://forum.ghost.org/u/Kevin)\
**Post date:** [March 4, 2019, 3:56pm UTC](https://forum.ghost.org/t/403-forbidden-error-on-postman-api-call/6017/2 "2019-03-04T15:56:54Z")

</div>

@aleksanderbodurri do you have the “Public API” turned on in the Labs screen of your admin?

FYI, the old v0.1 “Public API” is deprecated, you’ll be better off using the v2 Content API.

> **[Ghost Content API Documentation](https://ghost.org/docs/content-api/)**
>
> Ghost's RESTful Content API delivers published content to the world and can be accessed by any client to render a website. Read more on Ghost Docs.

---

<div class="post-metadata">

**Author:** ![aleksanderbodurri](https://avatars.discourse-cdn.com/v4/letter/a/e9a140/32.png) [@aleksanderbodurri](https://forum.ghost.org/u/aleksanderbodurri)\
**Post date:** [March 4, 2019, 4:10pm UTC](https://forum.ghost.org/t/403-forbidden-error-on-postman-api-call/6017/3 "2019-03-04T16:10:16Z")

</div>

I can’t see Public Api anywhere in my labs section of admin. I’ll look into using v2.

---

<div class="post-metadata">

**Author:** ![Kevin](https://sea1.discourse-cdn.com/flex015/user_avatar/forum.ghost.org/kevin/32/32_2.png) [@Kevin](https://forum.ghost.org/u/Kevin)\
**Post date:** [March 4, 2019, 4:24pm UTC](https://forum.ghost.org/t/403-forbidden-error-on-postman-api-call/6017/4 "2019-03-04T16:24:46Z")

</div>

If you’ve never enabled it before and are on Ghost 2.10.2 or later then it won’t be shown as it’s deprecated. We should definitely look at improving that error message though!

---

<div class="post-metadata">

**Author:** ![aleksanderbodurri](https://avatars.discourse-cdn.com/v4/letter/a/e9a140/32.png) [@aleksanderbodurri](https://forum.ghost.org/u/aleksanderbodurri)\
**Post date:** [March 4, 2019, 4:28pm UTC](https://forum.ghost.org/t/403-forbidden-error-on-postman-api-call/6017/5 "2019-03-04T16:28:23Z")

</div>

Ahh that makes sense. I’ll give the v2 api a shot. I really appreciate the quick replies, have a great day. 🙂

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/flex015/uploads/ghost2/original/2X/b/ba9ce5100b8bb264586f4f572545596b2ce3f081.png) [@system](https://forum.ghost.org/u/system)\
**Post date:** [March 18, 2019, 4:28pm UTC](https://forum.ghost.org/t/403-forbidden-error-on-postman-api-call/6017/6 "2019-03-18T16:28:26Z")

</div>

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.