# "403 POST requests must be made from same site."

**URL:** </static-proxy?url=https%3A%2F%2Fdiscuss.huggingface.co%2Ft%2F403-post-requests-must-be-made-from-same-site%2F179895%3E%5C
**Category:** Site Feedback\
**Created:** [September 4, 2026, 4:40pm UTC](/static-proxy?url=https%3A%2F%2Fdiscuss.huggingface.co%2Ft%2F403-post-requests-must-be-made-from-same-site%2F179895 "2026-09-04T16:40:21Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![nfreebee332](https://avatars.discourse-cdn.com/v4/letter/n/96bed5/32.png) [@nfreebee332](/static-proxy?url=https%3A%2F%2Fdiscuss.huggingface.co%2Fu%2Fnfreebee332)%5C
**Post date:** [September 4, 2026, 4:40pm UTC](/static-proxy?url=https%3A%2F%2Fdiscuss.huggingface.co%2Ft%2F403-post-requests-must-be-made-from-same-site%2F179895%2F1 "2026-09-04T16:40:21Z")

</div>

Hi,

When trying to accept the terms of [black-forest-labs/FLUX.2-klein-base-9b-fp8 · Hugging Face](https://huggingface.co/black-forest-labs/FLUX.2-klein-base-9b-fp8) while I’m connected, I’m redirected to [https://huggingface.co/black-forest-labs/FLUX.2-klein-base-9b-fp8/ask-access?next=%2Fblack-forest-labs%2FFLUX.2-klein-base-9b-fp8](https://huggingface.co/black-forest-labs/FLUX.2-klein-base-9b-fp8/ask-access?next=%2Fblack-forest-labs%2FFLUX.2-klein-base-9b-fp8) (where I’m not connected anymore and with the error “403 POST requests must be made from same site.”.

I’ve done a bit of digging and the session cookie “token” is sent for both pages, and is the same. So I assume this is not really a browser issue but rather a website issue ?

I use Firefox, I’d prefer not changing browsers as I’m trying to escape Google’s monopoly. I’ve disabled extensions, disabled Firefox’s enhanced protection but it still does not work.

Thanks

---

<div class="post-metadata">

**Author:** ![RDTvlokip](https://sea2.discourse-cdn.com/hellohellohello/user_avatar/discuss.huggingface.co/rdtvlokip/32/62725_2.png) [@RDTvlokip](/static-proxy?url=https%3A%2F%2Fdiscuss.huggingface.co%2Fu%2FRDTvlokip)%5C
**Post date:** [September 5, 2026, 1:03pm UTC](/static-proxy?url=https%3A%2F%2Fdiscuss.huggingface.co%2Ft%2F403-post-requests-must-be-made-from-same-site%2F179895%2F2 "2026-09-05T13:03:25Z")

</div>

It looks like this may be a Hugging Face-side issue rather than specifically a Firefox problem. I found other Hugging Face users reporting the same “POST requests must be made from same site” 403 error when trying to access gated content.

Since your session cookie is still present and you already tried disabling extensions and Firefox protection, I’d probably report it to Hugging Face staff as well. It could be related to the session or the access-request flow.