You should send a message to @Bug-Support with details, because they should be allowed.
Apparently roblox needs to change a config on their side.
In the meantime, it is a bug, and you’ll need a workaround. Possible ones:
-
Maybe the oxford API has some undocumented things you can try:
- Try using
app-id
andapp-key
, maybe the oxford API will accept hyphens - Maybe they’ll accept a standard
Authentication
header instead of separate id/keys. This is just a base64-encoded"id:key"
string. I wrote code for doing this in roblox here. Try that instead of these two headers?
- Try using
-
Host your own server that uses better-named headers and forwards them to oxford’s API. More complex but there are lots of online hosting options that would let you do this relatively cheaply.