title: Autodesk forge: Authenticated requests for viewer now return 403
body: <p>I am working on a proof of concept item using the Autodesk Forge platform. This is a .Net MVC page using the JS library provided by Autodesk for the viewer (v2.13)</p>
  
  <p>I am suddenly receiving a 403 error on requests to view a model. The model was uploaded in June and hasn't changed since for the request, I generate a new auth token on page load for the user. I am generating a token using the keys for my app and the calls still generate a token.</p>
  
  <p>All requests for the data against the URI:
  <a href="https://developer.api.autodesk.com/viewingservice/v1/(MyObjectURN)" rel="nofollow noreferrer">https://developer.api.autodesk.com/viewingservice/v1/(MyObjectURN)</a></p>
  
  <p>now all attempts to load come back as a 403 with
  {fault.name} - The client_id specified does not have access to the api product
  as the error message<br>
  It has started in the last hour or so. </p>
  
  <p>I can generate new auth tokens but it still fails on calls to get the model. Our hosted demo platform (for showing internal users not on site) code base hasn't changed in a week and exhibits the same behaviour leading me to believe it's a code change in the referenced Autodesk Forge libraries 
  (such as <a href="https://developer.api.autodesk.com/viewingservice/v1/viewers/viewer3D.js?v=v2.13" rel="nofollow noreferrer">https://developer.api.autodesk.com/viewingservice/v1/viewers/viewer3D.js?v=v2.13</a>)
  or a service issue on the viewer service.</p>
  
  <p>I can upload cut up code (removing identifiable details, keys etc) if required</p>