I’m running a workflow that integrates with Trello via REST APIs, accessing them through the https://api.trello.com/1 endpoint.
For some reason, my production server is triggering a CAPTCHA challenge from the AWS WAF, even though I’m correctly accessing the API according to the docs, I’m not surpassing rate limits, and the exact same request done via my development environment goes through.
Does anyone have a suggestion on how to solve this? It’s severely impacting my integration.
Example
Request:
curl --request GET --url 'https://api.trello.com/1/organizations/$ORGANIZATION_ID/boards?key=$API_KEY&token=$API_TOKEN' --header 'Accept: application/json'
Response (From DEV):
JSON array of Boards
Response (From PROD):
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="utf-8">
<meta name="viewport" content="width=device-width, initial-scale=1">
<title>Human Verification</title>
<style>
body {
font-family: "Arial";
}
</style>
<script type="text/javascript">
window.awsWafCookieDomainList = [];
window.gokuProps = {
"key":"$REDACTED",
"iv":"$REDACTED",
"context":"$REDACTED"
};
</script>
<script src="https://5648a54233c0.d2aafd5e.us-east-2.token.awswaf.com/5648a54233c0/946e166377e8/fcd518a0a514/challenge.js"></script>
<script src="https://5648a54233c0.d2aafd5e.us-east-2.captcha.awswaf.com/5648a54233c0/946e166377e8/fcd518a0a514/captcha.js"></script>
</head>
<body>
<div id="captcha-container"></div>
<script type="text/javascript">
AwsWafIntegration.saveReferrer();
window.addEventListener("load", function() {
const container = document.querySelector("#captcha-container");
CaptchaScript.renderCaptcha(container, async (voucher) => {
await ChallengeScript.submitCaptcha(voucher);
window.location.reload(true);
}
);
});
</script>
<noscript>
<h1>JavaScript is disabled</h1>
In order to continue, you need to verify that you're not a robot by solving a CAPTCHA puzzle.
The CAPTCHA puzzle requires JavaScript. Enable JavaScript and then reload the page.
</noscript>
</body>
</html>```