"403 POST requests must be made from same site."

Site Feedback
1

Hi,

When trying to accept the terms of black-forest-labs/FLUX.2-klein-base-9b-fp8 · Hugging Face while I’m connected, I’m redirected to https://huggingface.co/black-forest-labs/FLUX.2-klein-base-9b-fp8/ask-access?next=%2Fblack-forest-labs%2FFLUX.2-klein-base-9b-fp8 (where I’m not connected anymore and with the error “403 POST requests must be made from same site.”.

I’ve done a bit of digging and the session cookie “token” is sent for both pages, and is the same. So I assume this is not really a browser issue but rather a website issue ?

I use Firefox, I’d prefer not changing browsers as I’m trying to escape Google’s monopoly. I’ve disabled extensions, disabled Firefox’s enhanced protection but it still does not work.

Thanks

2

It looks like this may be a Hugging Face-side issue rather than specifically a Firefox problem. I found other Hugging Face users reporting the same “POST requests must be made from same site” 403 error when trying to access gated content.

Since your session cookie is still present and you already tried disabling extensions and Firefox protection, I’d probably report it to Hugging Face staff as well. It could be related to the session or the access-request flow.