Avatar images don't show up

[whitehat007]

Steps to reproduce

Avatar images do not show up in the conversation list...

Expected behavior

...which they should.

Actual behavior

When calling “GET https://fetlife.com/api/v2/members/[userID]” (with the appropriate authentication headers), the avatar array values give URLs that return a 403 error. If I copy and paste the picture url, I get the error message Not Allowed: Hot Linking. I also tried using the API url used in the Android app “GET https://app.fetlife.com/v2/members/[userID]”, but that didn’t work either. Here are the current API build settings for the app: And here is a partial example output for “GET https://fetlife.com/api/v2/members/15a5c108c”:

"avatar": [
	"id": a0648e02,
	"variants": [
		"mini": https://pic2.fetlife.com/6687/6687592/00053f90-7502-85f4-4277-f14faba3fb61_35.jpg?token=1529037118_dc9f383350f4fdcfe93b9ff5c2e40b0f22d95d4c93932e78817e1e88e56d563c,
		"small": https://pic0.fetlife.com/6687/6687592/00053f90-7502-85f4-4277-f14faba3fb61_60.jpg?token=1529037118_015d56845ef6536f37b7e3fc5b4cde97847ea722efeb71a48110f13787bbb804,
		"medium": https://pic2.fetlife.com/6687/6687592/00053f90-7502-85f4-4277-f14faba3fb61_110.jpg?token=1529037118_9203ccb2a2c590f14d813a5812fbdccc2d7ac27b4496a2d5fac7fd6d98ee390f
	]
]

Device Info

Tested on iPhone 7; iOS 11.3.1, iOS 12.0 and above

[PrivatePuffin]

Check the "referer" request header. This is mostly to a referer header stating something other than "https://fetlife.com"*