[Sitefinity Cloud] Media: 403 or 404 downloading docs

Server-to-server document downloads from a .NET Core Renderer return 403 on the public domain or 404 when a CDN media prefix is reused internally.

Aug 24, 2026
Knowledge

Title

URL Name

Sitefinity-Cloud-Media-403-or-404-downloading-docs

Article Number

000304520

Environment

Product: Sitefinity Cloud - PaaS Product: Sitefinity .NET Core Renderer Version: 14.4, 15.x

Question/Problem Description

A .NET Core Renderer in Sitefinity Cloud SaaS v2 can fail to download files from the Sitefinity document library when a named HttpClient sends the request to the public environment URL instead of the internal CMS URL. The initial request returns HTTP 403 because the request passes through the CDN edge and Cloudflare security layer before it reaches the CMS application. After switching the HttpClient base address to the internal CMS URL, the request can then return HTTP 404 if the document path still contains a CDN routing prefix such as /media-sta/. That prefix is valid only at the CDN edge and does not map to an internal CMS route.

Steps to Reproduce

Clarifying Information

This issue applies to server-to-server requests made from renderer code in Sitefinity Cloud SaaS v2. Public media URLs can include CDN routing prefixes such as /media/ or /media-sta/ that are valid only at the CDN layer. The supported internal document path starts at /docs/.

Error Message

System.Net.Http.HttpRequestException: Response status code does not indicate success: 403 (Forbidden). A second failure can occur after switching to the internal CMS URL: System.Net.Http.HttpRequestException: Response status code does not indicate success: 404 (Not Found).

Defect Number

Enhancement Number

Cause

The 403 response occurs because requests sent to the public environment URL pass through Cloudflare before they reach the CMS application. Cloudflare can block server-to-server HttpClient requests at the edge. The Sitefinity access key header is evaluated only by the CMS application after the request has already passed the CDN layer, so it does not prevent the 403 response.

The 404 response occurs because document URLs exposed through the public CDN can contain environment-specific routing prefixes such as /media-sta/. Those prefixes are handled by the CDN edge layer and are not valid CMS routes. When the same path is sent to the internal CMS URL, IIS cannot resolve it and returns 404. The internal CMS route for document library files starts at /docs/.

Resolution

Configure the named HttpClient to use the internal CMS URL from the Sitefinity:Url application setting.
Do not use Sitefinity:CustomEnvironmentUrl or any public Sitefinity Cloud domain for server-to-server document downloads.
Normalize the document path before the request is sent internally. If the path contains a CDN routing prefix, strip everything before docs.
Send the request to the normalized internal path.

Example HttpClient configuration:

var sfUrl = configuration["Sitefinity:Url"]?.TrimEnd('/');

services.AddHttpClient("BLSCareerStats", client =>
{
    client.Timeout = System.TimeSpan.FromSeconds(30);

    if (!string.IsNullOrWhiteSpace(sfUrl))
    {
        client.BaseAddress = new System.Uri(sfUrl, System.UriKind.Absolute);
    }
});

Example path normalization before the request:

var path = blsDocumentUrl;
var docsIndex = path.IndexOf("/docs/", StringComparison.OrdinalIgnoreCase);

if (docsIndex > 0)
{
    path = path.Substring(docsIndex);
}

Example result:

Public URL: /media-sta/docs/default-source/bls-stats/bls-soc.xlsx
Internal request path: /docs/default-source/bls-stats/bls-soc.xlsx

Workaround

Notes

Progress article(s):

Cloud: Cloudflare is blocking an API request

References to Other Documentation:

Progress Docs, Edge rules in Sitefinity Cloud https://www.progress.com/documentation/sitefinity-cms/cloud/platform-overview/edge-rules

Progress Docs, Application Settings https://www.progress.com/documentation/sitefinity-cms/application-settings

Keyword Phrase

Last Modified Date

9/4/2026 12:49 PM

[Sitefinity Cloud] Media: 403 or 404 downloading docs

Files(0)

Was this article helpful?

Was this article helpful?

[Sitefinity Cloud] Media: 403 or 404 downloading docs

Information

Related Articles