You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
{{ message }}
Repository navigation
[Bug] PCGamingWiki metadata import broken after API changes (403 / cargoquery permissiondenied) #485
However, when testing the same cargoquery endpoint manually with a descriptive User-Agent, the HTTP request itself succeeds, but PCGamingWiki returns:
{
"error": {
"code": "permissiondenied",
"info": "You don't have permission to run arbitrary Cargo queries."
}
}
So there seem to be two separate compatibility issues:
Drop currently sends the generic User-Agent "axios/1.12.0", which can cause HTTP 403 responses.
Anonymous Cargo queries are no longer permitted by PCGamingWiki, so the current PCGamingWiki provider cannot complete its existing cargoquery requests even with a proper User-Agent.
Current Drop request
Drop currently queries:
action=cargoquery
tables=Infobox_game
Expected behavior
PCGamingWiki metadata import should either:
use the currently supported PCGamingWiki API/authentication method,
use a non-Cargo endpoint if available,
or fail gracefully / allow the PCGamingWiki metadata provider to be disabled.
Actual behavior
Game metadata import logs repeated PCGamingWiki errors and the provider is effectively unusable.
Environment
Docker
Image: ghcr.io/drop-oss/drop:latest
PostgreSQL 14
Reverse proxy in front of Drop, but the issue is reproducible directly from inside the Drop container and is unrelated to the proxy
PCGamingWiki connectivity, DNS and TLS are working correctly from inside the container
Notes
A configuration option to disable the PCGamingWiki provider would also be useful as a temporary workaround while API compatibility is being restored.
Activity
cadaniel commentedon Sep 8, 2026
I was able to solve this for myself using AI.
I'm not a web dev, and I'm not gonna pretent I know if it's quality or not. But I'm attaching the diff here to see whats going on.
tl;dr
You need to authenticate using a bot set of credentials. Keep the cookies around to make requests with later.
cookies.patch