# The requested URL returned error: 403

**URL:** <https://drone.discourse.group/t/the-requested-url-returned-error-403/10891>\
**Category:** Drone Support\
**Created:** [July 8, 2020, 10:20am UTC](https://drone.discourse.group/t/the-requested-url-returned-error-403/10891 "2020-07-08T10:20:26Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![aitang](https://yyz1.discourse-cdn.com/flex003/user_avatar/drone.discourse.group/aitang/32/4464_2.png) [@aitang](https://drone.discourse.group/u/aitang)\
**Post date:** [July 8, 2020, 10:20am UTC](https://drone.discourse.group/t/the-requested-url-returned-error-403/10891/1 "2020-07-08T10:20:26Z")

</div>

Hello  
Trying to build my very first pipeline with Drone 1.2.1 on an self-hosted gitlab using acces token.  
The clone step fails with 403 error  
 ![image](https://canada1.discourse-cdn.com/flex003/uploads/testdrone/original/2X/4/424f7a80d0fae644f1bd4b2f98439ab9ccec5685.png)

server settings

```
DRONE_RPC_SECRET=ALQU2M0KdptXUdTPKcEw
DRONE_GITLAB_CLIENT_ID=xxxxxxxxx
DRONE_GITLAB_CLIENT_SECRET=xxxxxxxx
DRONE_GITLAB=true
DRONE_GIT_ALWAYS_AUTH=true
DRONE_GITLAB_SERVER=https://git.xxxxx
DRONE_SERVER_PROTO=http
DRONE_TLS_AUTOCERT=false
DRONE_LOGS_DEBUG=true
DRONE_GIT_USERNAME=x-oauth-token
DRONE_GIT_PASSWORD=xxxxxxxx
DRONE_USER_CREATE=username:xxxx,admin:true

```

drone log

`{"build.id":39,"build.number":39,"error":"Cannot transition status via :enqueue from :pending (Reason(s): Status cannot transition via \"enqueue\")","level":"warning","msg":"manager: cannot publish status","repo.id":33,"stage.id":39,"time":"2020-07-08T09:03:26Z"}`

Where am i going wrong?Anyone

---

<div class="post-metadata">

**Author:** ![ashwilliams1](https://yyz1.discourse-cdn.com/flex003/user_avatar/drone.discourse.group/ashwilliams1/32/5549_2.png) [@ashwilliams1](https://drone.discourse.group/u/ashwilliams1)\
**Post date:** [July 8, 2020, 2:32pm UTC](https://drone.discourse.group/t/the-requested-url-returned-error-403/10891/2 "2020-07-08T14:32:20Z")

</div>

403 forbidden would indicate the clone failed due to some problem with the username / password not having adequate permission. Are you sure `x-oauth-token` is the correct username? According to stackoverflow the username should be `oauth2` [1]

[1] [https://stackoverflow.com/questions/25409700/using-gitlab-token-to-clone-without-authentication](https://stackoverflow.com/questions/25409700/using-gitlab-token-to-clone-without-authentication)