Accessing reviews.list with OAuth when profile viewing is not set to "anyone"?

[Tobias]

Hey folks,

I'm trying to access the list of books I've read via reviews.list (https://www.goodreads.com/api/index#r...). Since my profile is set to only be visible to Goodreads members, the API displays "403 Forbidden".

Would this work with OAuth? I've tried that both using https://github.com/dpoposki/goodreads and by manually constructing the request in Postman, but it stays "Forbidden".

If I set my profile to public and access the endpoint again everything works, so I guess at least I got the URL right.

[Tobias]

Turns out it was a problem with the URL that only appears when using OAuth.

The PHP client that I'm using (https://github.com/dpoposki/goodreads) has the habit of adding empty elements to the URL (e.g. "search[query]" here):

https://www.goodreads.com/review/list...

This works fine for public profiles, but once I try to get a private profile I get "forbidden", even with OAuth. It starts working once I remove the "&search[query]":

https://www.goodreads.com/review/list...

A bit weird, but I'm glad I got that working.