使用C#连接IBKR Web API V1.0遭遇403错误，求解决方案

问题描述 #

我已通过Postman成功连接IBKR Web API V1.0网关，无需额外授权或请求头，但用C#控制台程序发起相同请求时，始终收到「Error 403 - Access Denied」错误。目前找不到可用的C#示例，模仿Python代码改写也无法解决问题。我的代码如下：

static async Task Main()
{
    HttpClientHandler handler = new HttpClientHandler();
    handler.ServerCertificateCustomValidationCallback = (message, cert, chain, errors) => true;
    HttpClient client = new HttpClient(handler);
    client.DefaultRequestHeaders.Accept.Add(new MediaTypeWithQualityHeaderValue("application/json"));
    HttpResponseMessage response = await client.GetAsync("https://localhost:5000/v1/api/iserver/auth/status");
    string res = await response.Content.ReadAsStringAsync();
    Console.WriteLine(res);
}

可能的原因及解决方法 #

• 缺失User-Agent请求头：多数API会校验User-Agent字段，Postman默认会自动添加，但C#的HttpClient默认不带该字段。手动添加即可：

  client.DefaultRequestHeaders.UserAgent.ParseAdd("Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36");
  

• TLS版本不匹配：IBKR Web API可能要求特定TLS版本（如TLS 1.2），强制指定即可：

  System.Net.ServicePointManager.SecurityProtocol = System.Net.SecurityProtocolType.Tls12;
  

• 会话未初始化：Postman会自动保存网关会话Cookie，而C#程序每次请求都是新会话。先调用/v1/api/tickle接口初始化会话，再请求目标接口：

  // 先发送tickle请求获取会话
  await client.GetAsync("https://localhost:5000/v1/api/tickle");
  

• 证书验证逻辑问题：虽然禁用了证书验证，但可能存在其他校验逻辑，可尝试使用HttpClient默认Handler，或确认本地证书是否正确导入。

完整修正示例代码 #

static async Task Main()
{
    // 强制使用TLS 1.2
    System.Net.ServicePointManager.SecurityProtocol = System.Net.SecurityProtocolType.Tls12;

    HttpClientHandler handler = new HttpClientHandler();
    handler.ServerCertificateCustomValidationCallback = (message, cert, chain, errors) => true;
    HttpClient client = new HttpClient(handler);

    // 添加User-Agent请求头
    client.DefaultRequestHeaders.UserAgent.ParseAdd("Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36");
    client.DefaultRequestHeaders.Accept.Add(new MediaTypeWithQualityHeaderValue("application/json"));

    // 初始化会话
    await client.GetAsync("https://localhost:5000/v1/api/tickle");

    HttpResponseMessage response = await client.GetAsync("https://localhost:5000/v1/api/iserver/auth/status");
    string res = await response.Content.ReadAsStringAsync();
    Console.WriteLine(res);
}

内容的提问来源于stack exchange，提问作者Sharif Yazdian