API blocked

Thanks. I removed the restriction by website, and added it by IP, using the IP address provided by my host, and now I’m seeing this new error. What do I do now? The IP address it says is originating is now the same IP address as my server / host. I don’t know where the originating IP came from?

While trying to retrieve events, Google returned an error:{
  "error": {
    "code": 403,
    "message": "The provided API key has an IP address restriction. The originating IP address of the call (34.173.182.72) violates this restriction.",
    "errors": [
      {
        "message": "The provided API key has an IP address restriction. The originating IP address of the call (34.173.182.72) violates this restriction.",
        "domain": "global",
        "reason": "forbidden"
      }
    ],
    "status": "PERMISSION_DENIED",
    "details": [
      {
        "@type": "type.googleapis.com/google.rpc.ErrorInfo",
        "reason": "API_KEY_IP_ADDRESS_BLOCKED",
        "domain": "googleapis.com",
        "metadata": {
          "service": "calendar-json.googleapis.com",
          "consumer": "projects/xxxxxxxxxxxx",
          "callerIp": "34.173.182.72"
        }
      },
      {
        "@type": "type.googleapis.com/google.rpc.LocalizedMessage",
        "locale": "en-US",
        "message": "The provided API key has an IP address restriction. The originating IP address of the call (34.173.182.72) violates this restriction."
      }
    ]
  }
}
Please ensure that both your Google Calendar ID and API Key are valid and that the Google Calendar you want to display is public.Only you can see this notice.

Additionally, I am using this plugin on another site (same host, though) and on that one I checked and I *am* restricting by websites (and not IP) and that calendar is working fine.

• This reply was modified 10 months, 3 weeks ago by wigglepit.

Thank you – I can’t do that because it will work temporarily, but the IP at our host changes and I’d have to add over 60 to *almost* cover all of them (hundreds to cover them all)

I restricting by ‘websites’ on another site using this plugin. Not sure why that one is working, but I can’t do that with this one? Is there no other way than by IP?

Hello,

Thanks for your time troubleshooting (and providing this plugin in general!).

I just tested the other site that is restricting by website, and it is still working and current (not cached). I just dded a new calendar event, cleared the calendar cache, and it showed up on the website. This particular website was setup a few years ago, maybe something was grandfathered in? I’m happy to share it with you if you can give me an email (don’t want to link to it on a public board).

Thanks again

Will do – thanks!

Appreciate the support and plugin 🙂

• This reply was modified 10 months, 3 weeks ago by wigglepit.

Hi Oliver,

I sent my info to the plugin developer by email and they followed up with me and offered good support. But as it turns out, I gave up on restricting the key, beccause I found this out and sent them this:

I read that restricting the API Key may not be necessary if you restrict the key for only the Google Calendar API, and then set quotas to prevent abuse.  So I just set really low quotas and it seems to be working. Will that be okay, or should I pursue it further?

And they responded:

In this case, yes, you can implement custom usage and spend limits in your account settings to act as a safeguard against unexpected usage due to leaked keys or errant scripts. Also, regular key rotation would be fine as well.

So I just did that and let it be. Not sure if this helps or not. Good luck!