cURL has errors with some users fetching my endpoints

[cmdsoftworks]

What is the name of the domain?

getsolara.dev

What is the error number?

curl (35)

What is the error message?

curl: (35) schannel: next InitializeSecurityContext failed: SEC_E_INVALID_TOKEN (0x80090308) - The token supplied to the function is invalid

What is the issue you’re encountering

My website cannot be accessed by a plethora of users, and it’s not due to an ISP block. A lot can view my endpoint in their browser just fine, but when trying to access from curl, they get an error (curl:(35) schannel: next InitializeSecurityContext failed: SEC_E_INVALID_TOKEN (0x80090308) - The token supplied to the function is invalid). However, if they switch on a VPN, they can connect just fine - but it’s not an ISP block, as mentioned before they can access in-browser just fine.

What steps have you taken to resolve the issue?

I have tried changing many settings such as TLS or SSL settings, yet there is no luck.

What feature, service or problem is this related to?

I don’t know

What are the steps to reproduce the issue?

Try accessing the endpoint “https://getsolara.dev/api/endpoint.json” in-browser, the usual case is that the information appears fine.

Then, try doing "curl ‘https://getsolara.dev/api/endpoint.json’ " in CMD prompt, and you may face the error “curl: (35) schannel: next InitializeSecurityContext failed: SEC_E_INVALID_TOKEN (0x80090308) - The token supplied to the function is invalid”

Screenshot of the error

[ikmal]

I’m not seeing an issue with curl to your endpoint, might your local problem.

curl https://getsolara.dev/api/endpoint.json
{
    "BootstrapperVersion": "1.17",
    "SupportedClient": "version-86c3597a87f4495e",
    "SoftwareVersion": "3.103",
    "BootstrapperUrl": "https://4c206720.solaraweb-alj.pages.dev/download/static/files/Bootstrapper.exe",
    "SoftwareUrl":"https://4c206720.solaraweb-alj.pages.dev/download/static/files/Solara.Dir.zip",
    "VersionUrl":"https://clientsettings.roblox.com/v2/client-version/WindowsPlayer/channel/live",
    "ClientHash":"cd6b7d62f4bec231f8b7f219e2aea9896ab658d58e7d18dc708ab298fa83b587"
}

[cmdsoftworks]

I don’t have this problem myself. The problem lies in a good amount of the userbase. They are getting many SSL errors and request errors through curl, and yet their network is not actively blocking the site.

[cmdsoftworks]

Since you’re part of the Cloudflare Team, do you think you could maybe take a look at my site’s settings, and see what may be affecting these ? I use cloudflare pages to serve my files.