Getting 403 with Media CDN

Hey team,

I am trying to use signed cookie with media CDN, and I have followed this article to implement the same https://cloud.google.com/media-cdn/docs/generate-signatures#programmatically-create-signed-url-cookie, but after all the efforts I am getting


Google-Edge-Cache: Invalid signed request
Error: 114


and on checking the logs I am getting the error legacy_signed_request_invalid, it’s very ambiguous and I have also verified the signature using the custom script and seems to be fine.

Any help from the team would be appreciated.

Hi @ashifa454

Welcome to Google Cloud Community!

Media CDN returns an HTTP 403 error when clients attempt to connect using an IP address that isn’t included in the signed request. Please ensure all signature parameters are using a valid URL, the correct key name, and a properly encoded Base64 key. They must be grouped together otherwise, the values of the parameters will be case sensitive. You must also check the optional parameters; that may also lead to HTTP 403 error.

The following scenarios may lead to Media CDN rejecting clients with an HTTP 403 error:

  • Dual-stack (IPv4, IPv6) environments
  • Connection migration (WiFi to cellular, and cellular to WiFi)
  • Mobile networks that use Carrier Gateway NAT (CGNAT or CGN)
  • Multi-path TCP (MPTCP)

For more detailed insights, kindly reach out to Google Cloud Support.

I hope the above information is helpful.