• custom webhook
• 403 forbidden errors

An HTTP 403 error may be caused by an invalid token or incorrect URL for a log stream, which in turn may cause the log service provider to return this error to Auth0. 

There may be a few common causes of this issue if the log stream was working correctly earlier.

1. The log service access token has expired or was invalidated.
2. A change in the log service caused the stream URL to become invalid or change.

Make a direct POST request to the log service to ensure the service accepts the payload. With this test, verify the validity of the credentials and URL from the log service provider logs.

E.g.

curl -X POST \
  https://your-webhook-endpoint.com/api/logs \
  -H 'Content-Type: application/json' \
  -H 'Authorization: Bearer YOUR_SECRET_TOKEN' \
  -d '{
  "logs": [
    {
      "log_id": "example-log-id-12345",
      "data": {
        "date": "2025-06-03T19:08:26.548Z",
        "type": "example_event",
        "description": "Example event description",
        "client_id": "client-123",
        "client_name": "Example Client",
        "ip": "54.184.241.96",
        "details": {
          "first_name": "Jane",
          "last_name": "Doe",
          "email": "jane.doe@example.com",
          "phone": "555-123-4567",
          "address": "123 Main St, Anytown, USA",
          "username": "jane.doe"
        }
      }
    },
    {
      "log_id": "example-log-id-12345",
      "data": {
        "date": "2025-06-03T19:08:26.548Z",
        "type": "example_event",
        "description": "Example event description",
        "client_id": "client-123",
        "client_name": "Example Client",
        "user_id": "user-456",
        "ip": "54.184.241.96",
        "log_id": "log-789",
        "details": {
          "first_name": "John",
          "last_name": "Smith",
          "email": "john.smith@example.com",
          "phone": "555-123-4567",
          "address": "123 Main St, Anytown, USA",
          "username": "john.smith"
        }
      }
    }
  ]
}'

For the sample Curl call provided above, the Auth0 setup would look like the one shown in the shared screenshot. Notice that the entire value of the Authorization header is set verbatim, including the "Bearer" text in the Authorization Token setting. Auth0 does not automatically add the "Bearer" part to support other common types, such as "Basic". 

Related References

• Customize Log Stream