Java发送POST请求调用Discord接口时机器人授权失败返回403如何解决

核心原因分析 #

• 缺失User-Agent请求头。Discord API明确要求所有请求必须携带合法的User-Agent标识，JDK自带的HttpURLConnection默认发送的User-Agent会被Discord拦截，而CURL默认携带符合要求的UA标识，因此CURL请求正常，Java代码请求返回403。
• 错误响应未读取错误流。返回403时con.getInputStream()会抛出异常，无法拿到Discord返回的具体错误提示，你需要先读取getErrorStream()获取详细报错信息辅助定位。
• 部分版本的HttpURLConnection默认会发送Expect: 100-continue头，Discord API对该头的兼容性较差，也可能触发403拦截。

修复代码示例 #

@Override
public void doCommand(CommandEvent event) throws IOException {
    String jsonInputString = "{\"max_age\": 86400, \"max_uses\": 0, \"target_application_id\":880218394199220334, \"target_type\":2, \"temporary\": false, \"validate\": null}";
    String botToken = "*替换为实际token*";
    String current = event.getMember().getVoiceState().getChannel().getId();
    URL url = new URL ("https://discord.com/api/v8/channels/" + current + "/invites");
    HttpURLConnection con = (HttpURLConnection)url.openConnection();
    con.setRequestMethod("POST");
    // 新增User-Agent头，格式建议为 机器人名称/版本号
    con.setRequestProperty("User-Agent", "MyDiscordBot/1.0");
    con.setRequestProperty("Authorization", "Bot " + botToken);
    con.setRequestProperty("Content-Type", "application/json; utf-8");
    con.setRequestProperty("Accept", "application/json");
    // 禁用Expect: 100-continue头
    con.setRequestProperty("Expect", "");
    con.setDoOutput(true);

    try(OutputStream os = con.getOutputStream()) {
        byte[] input = jsonInputString.getBytes(StandardCharsets.UTF_8);
        os.write(input, 0, input.length);
    }
    
    // 先判断响应状态码，分别处理正常流和错误流
    int responseCode = con.getResponseCode();
    InputStream inputStream = responseCode >= 400 ? con.getErrorStream() : con.getInputStream();
    try(BufferedReader br = new BufferedReader(
            new InputStreamReader(inputStream, StandardCharsets.UTF_8))) {
        StringBuilder response = new StringBuilder();
        String responseLine = null;
        while ((responseLine = br.readLine()) != null) {
            response.append(responseLine.trim());
        }
        // 测试阶段可以先打印完整响应和状态码排查问题
        System.out.println("响应状态码：" + responseCode + "，响应内容：" + response);
        event.reply(response.toString());
    }
}

额外检查项 #

• 确认机器人在对应语音频道拥有创建邀请的权限，权限缺失也会返回403报错
• 确认请求的API版本和你CURL请求用的版本一致，不同API版本的权限校验逻辑存在差异

内容的提问来源于stack exchange，提问作者AqUpd