While trying to configure https://gorest.co.in/public/v2/users in SAP CPI we re getting 403 forbidden error

Hi Kishan,

Confirmed and fixed on our side. The 403 was not from the GoRest API (it only ever returns 200 / 401 / 429) - it was our Cloudflare edge issuing a bot challenge. Our security events showed your requests to /public/v2/users hitting Cloudflare's Bot Fight Mode, which auto-challenges traffic from datacenter networks (your calls came from an AWS IP with a non-browser HTTP client). Postman from your laptop wasn't flagged, which is why it worked there.

We've turned that off for the API. Please retry from SAP CPI - it should now return 200. If you still see a 403, capture the response body and the cf-ray header and reply here.

One note: the blocked requests showed a Go-http-client user agent from an AWS IP, not SAP CPI's usual Java client - so if there's a proxy or iPaaS hop in front of CPI, worth a quick check that it's the same path.

Thanks,
GoRest team