Authorization has been denied for this request

Help and Feedback Scripting Support
#1

source:
https://groups.roblox.com/docs#!/Revenue/post_v1_groups_groupId_payouts

  1. What do you want to achieve?
    I am trying to make a script that pays out a group member in R$.

  2. What is the issue?
    The following code prints “Authorization has been denied for this request”.

local HttpService = game:GetService("HttpService")

local target = "https://groups.roblox.com/v1/groups/   mygroup.   /payouts"
local data =
	{
		["PayoutType"] = "FixedAmount",
		["Recipients"] = {
			["recipientId"] = 1215858332,
			["recipientType"] = "User",
			["amount"] = 1
		}
	}
local json = HttpService:JSONEncode(data)
local decoded = HttpService:JSONDecode(json)
print(json)

local payOut = HttpService:RequestAsync(
	{
		Url = "https://groups.rprxy.xyz/v1/groups/   mygroup.   /payouts",
		Method = "POST",
		Headers = {
			Cookie = ".ROBLOSECURITY=   mycookie.   ",
			["X-CSRF-TOKEN"] = "   mycsrftoken.   ",
			["Content-Type"] = "application/json"
		},
		Body = json
	})

print("Response Body: "..payOut.Body)

Full body:
Response Body: {"errors":[{"code":23,"message":"Insufficient permissions to complete the request.","userFacingMessage":"Insufficient permissions to complete the request."}]}

  1. What solutions have you tried so far?
    I think I have seen all existing threads related to this subject. Regardless nothing helped.

If a php server is required, how would I approach that?

#2

Probably means that the account whose cookie you put in doesn’t have perms to pay out the funds.
Also, you probably shouldn’t be sending your cookie through a proxy that you don’t own

1 Like
#3

I used the right account. By the way the account I used is not a big loss in case the service is actually malicious.

#4

Insufficient permissions to complete the request. is typically the response when the authenticated user has no permissions to access said resource. For reference, Authorization has been denied fo this request on the API would be for when the cookie is invalid.

After testing with the API for a bit, the user you’re authenticating with has no permissions to use payouts in the group.

#5

AFAIK, only the group owner can pay out funds, are you sure you used the cookie of the group owner?

1 Like
#6

Yeah I used the group owner account

#7

Using a proxy that you dont own means the owner can do anything with your group, he can send all robux to himself steal place files and create chaos. Come on its easy and free to make your proxy you can use glitch or heroku

#8

Are you sure the group has payouts unlocked and are you using a recent csrf token?

#9

I will try to use new data. aiuvhnrgbfzo