Font-awesome: Access denied (403) for font CSS files loaded via Kit

[ryanc-me]

Describe the bug
At some point in the last ~1-2 weeks, the icons on my website stopped loading. After inspecting browser logs, I can see that the font CSS file URLs are returning 403 Access Denied response codes.

The browser log shows:

my-fa-kit.js:2 GET https://ka-f.fontawesome.com/releases/v5.14.0/css/free-v4-shims.min.css 403
my-fa-kit.js:2 Font Awesome Kit: Error
my-fa-kit.js:2 GET https://ka-f.fontawesome.com/releases/v5.14.0/css/free-v4-font-face.min.css 403
my-fa-kit.js:2 GET https://ka-f.fontawesome.com/releases/v5.14.0/css/free.min.css 403

My FA Kit is currently targeting v5.14.0:

I also tried updating my Kit with few other versions. v5.13.0 and v5.15.1 work correctly, but v5.13.1 shows a different 403 error:

GET https://ka-f.fontawesome.com/releases/v5.13.1/webfonts/free-fa-solid-900.woff2 net::ERR_ABORTED 403

I'm located in New Zealand, and seem to be connecting with the SYD4-C2 CloudFront ingress.

To Reproduce
Create a FontAwesome Kit, select v5.13.1 or v5.14.0, and add the kit code to a website. Font CSS or WOFF2 URLs will fail to load with a 403 error, and the icons will not show.

Alternatively, try using curl to request font URLs manually:

curl -Is https://ka-f.fontawesome.com/releases/v5.13.0/css/free.min.css | head -n 1 # response: 200
curl -Is https://ka-f.fontawesome.com/releases/v5.13.1/css/free.min.css | head -n 1 # response: 200
curl -Is https://ka-f.fontawesome.com/releases/v5.14.0/css/free.min.css | head -n 1 # response: 403
curl -Is https://ka-f.fontawesome.com/releases/v5.15.1/css/free.min.css | head -n 1 # response: 200

curl -Is https://ka-f.fontawesome.com/releases/v5.13.0/webfonts/free-fa-solid-900.woff2 | head -n 1 # response: 200
curl -Is https://ka-f.fontawesome.com/releases/v5.13.1/webfonts/free-fa-solid-900.woff2 | head -n 1 # response: 403
curl -Is https://ka-f.fontawesome.com/releases/v5.14.0/webfonts/free-fa-solid-900.woff2 | head -n 1 # response: 403
curl -Is https://ka-f.fontawesome.com/releases/v5.15.1/webfonts/free-fa-solid-900.woff2 | head -n 1 # response: 200

Expected behavior
Older versions, selected via the Kit config page, work correctly.

Screenshots
The FontAwesome versions available on the Kit config page:

Version and implementation
Version: at least v5.13.1 and v5.14.0
Browser and version: Issue is present when using curl.

• [ ] SVG with JS
• [x] Web Fonts with CSS
• [ ] SVG Sprites
• [ ] On the Desktop

Bug report checklist

• [x] I have filled out as much of the above information as I can
• [x] I have included a test case because my odds go _way_ up that the team can fix this when I do
• [x] I have searched for existing issues and to the best of my knowledge this is not a duplicate

[saleem-hadad]

same here (UAE)!

[tagliala]

Same here (Italy)

@robmadole could you please take a look?

[ngekoding]

Same here!

[tagliala]

Please do not comment without providing additional information that could help debugging the issue (i.e.: country, this may be a region-dependent bug)

If you have this issue, please just use reactions on the opening post (👍 )

[robmadole]

Thanks for the report.

We had some caching and permission issues. I think this is resolved now. Can everyone confirm?

[ryanc-me]

@robmadole that seems to have fixed v5.14.0, thank you!

However, I am still getting a 403 error on one of the woff2 files for v5.13.1.

Browser log:

GET https://ka-f.fontawesome.com/releases/v5.13.1/webfonts/free-fa-solid-900.woff2 net::ERR_ABORTED 403

And via curl:

curl -Is https://ka-f.fontawesome.com/releases/v5.13.1/webfonts/free-fa-solid-900.woff2 | head -n 1 # response: 403

[tagliala]

curl -Is https://ka-f.fontawesome.com/releases/v5.13.1/webfonts/free-fa-solid-900.woff2
HTTP/1.1 200 OK

Getting this from Italy

[ryanc-me]

Yup, that seems to be working for me now too!

curl -Is https://ka-f.fontawesome.com/releases/v5.13.1/webfonts/free-fa-solid-900.woff2 | head -n 1
HTTP/2 200

[ngekoding]

Thanks for the report.

We had some caching and permission issues. I think this is resolved now. Can everyone confirm?

Thank you, everything working well now. (Indonesia)

[robmadole]

Thanks all!

[saleem-hadad]

I'm still facing these issues!

[ryanc-me]

@saleem-hadad what happens if you load https://ka-f.fontawesome.com/releases/v5.15.1/css/free.min.css manually in a new Chrome tab, or if you request those URL's via CURL?

curl -Is https://ka-f.fontawesome.com/releases/v5.15.1/css/free.min.css | head -n 1
curl -Is https://ka-f.fontawesome.com/releases/v5.15.1/css/free-v4-shims.min.css | head -n 1
curl -Is https://ka-f.fontawesome.com/releases/v5.15.1/css/free-v4-font-face.min.css | head -n 1

They seem to be working on my side. I wonder if the CF cache serving you is still not working correctly.

You could also try this command. It should show some more info about the cache status, CloudFront POP, etc:

curl -Is https://ka-f.fontawesome.com/releases/v5.15.1/css/free.min.css

[saleem-hadad]

Hi @ryanc-me thanks for the response
when I load the link directly into my browser it shows This site can’t be reached

And when I run any of the above commands the output is empty :/

[saleem-hadad]

However, I enable VPN it works tho.
The issue seems to be with caching.
I live in Dubai, UAE.

[ryanc-me]

@saleem-hadad that seems to be a different error to the one we were seeing above. Could you post the output of:

• ping https://ka-f.fontawesome.com/releases/v5.15.1/css/free.min.css
• curl -Is https://ka-f.fontawesome.com/releases/v5.15.1/css/free.min.css (_without_ the | head -n 1 part)

[saleem-hadad]

Still the output empty

[ryanc-me]

@saleem-hadad Sorry about the delay here! Are you still having issues? If so, you should open a new issue to track it separately. 🙂