GOG "Metro Exodus" installer - 403 forbidden error - Securex errors

Hi :grinning:

At the moment is the Halloween Special sale on GOG. So i bought the ‘Metro Franchise Bundle’ which includes everything from the entire franchise.

Metro-Exodus-Package

The Lutris GOG Installer offers 2 variants:
GOG installer
GOG auto-generated

I tried both but got the same error. ‘403 Client Error: Forbidden’. The installer offers to manually provide the securex file but i don’t know where it is. I guess it’s a temp generated token ?


INFO     2023-10-29 13:05:14,893 [downloader.async_download:143]:https://content-system.gog.com/products/1407287452/users/46987812356147789/namespaces/website/download?path=%2Fsecurex&token=eyJhbGciOiJIUzI1NiIsImV4cCI6IjE2OTg2Njc0ODcifQ.eyJjb250ZW50Ijoie1widXNlcl9pZFwiOjQ2OTg3ODEyMzU2MTQ3Nzg5LFwicHJvZHVjdF9pZFwiOjE0MDcyODc0NTIsXCJwYXRoXCI6XCJcXFwvc2VjdXJleFwifSIsImV4cCI6IjE2OTg2Njc0ODcifQ.PP5yUb8fXwhrLu8qTHqVt6jtnIQoMSLWc73KekfJiPo&access_token=yogaZ4no3n_V-MrjmgUoiNqd4eZ6ZFvp2P4EbraxIXk1BXKTh0QZHJn0arJszdO-fENR8GBpFSL7gVcu6S_VQ2W_rWGDblg6PD2ivxjsWSO3S1iYStWaIFaej9e5uGalBYNJf7opiuGSgMqqAZKBRg returned a 403 error
ERROR    2023-10-29 13:05:14,894 [downloader.async_download:156]:Download failed: 403 Client Error: Forbidden for url: https://content-system.gog.com/products/1407287452/users/46987812356147789/namespaces/website/download?path=%2Fsecurex&token=eyJhbGciOiJIUzI1NiIsImV4cCI6IjE2OTg2Njc0ODcifQ.eyJjb250ZW50Ijoie1widXNlcl9pZFwiOjQ2OTg3ODEyMzU2MTQ3Nzg5LFwicHJvZHVjdF9pZFwiOjE0MDcyODc0NTIsXCJwYXRoXCI6XCJcXFwvc2VjdXJleFwifSIsImV4cCI6IjE2OTg2Njc0ODcifQ.PP5yUb8fXwhrLu8qTHqVt6jtnIQoMSLWc73KekfJiPo&access_token=yogaZ4no3n_V-MrjmgUoiNqd4eZ6ZFvp2P4EbraxIXk1BXKTh0QZHJn0arJszdO-fENR8GBpFSL7gVcu6S_VQ2W_rWGDblg6PD2ivxjsWSO3S1iYStWaIFaej9e5uGalBYNJf7opiuGSgMqqAZKBRg
Traceback (most recent call last):
  File "/usr/lib/python3/dist-packages/lutris/util/downloader.py", line 144, in async_download
    response.raise_for_status()
  File "/usr/lib/python3/dist-packages/requests/models.py", line 1021, in raise_for_status
    raise HTTPError(http_error_msg, response=self)
requests.exceptions.HTTPError: 403 Client Error: Forbidden for url: https://content-system.gog.com/products/1407287452/users/46987812356147789/namespaces/website/download?path=%2Fsecurex&token=eyJhbGciOiJIUzI1NiIsImV4cCI6IjE2OTg2Njc0ODcifQ.eyJjb250ZW50Ijoie1widXNlcl9pZFwiOjQ2OTg3ODEyMzU2MTQ3Nzg5LFwicHJvZHVjdF9pZFwiOjE0MDcyODc0NTIsXCJwYXRoXCI6XCJcXFwvc2VjdXJleFwifSIsImV4cCI6IjE2OTg2Njc0ODcifQ.PP5yUb8fXwhrLu8qTHqVt6jtnIQoMSLWc73KekfJiPo&access_token=yogaZ4no3n_V-MrjmgUoiNqd4eZ6ZFvp2P4EbraxIXk1BXKTh0QZHJn0arJszdO-fENR8GBpFSL7gVcu6S_VQ2W_rWGDblg6PD2ivxjsWSO3S1iYStWaIFaej9e5uGalBYNJf7opiuGSgMqqAZKBRg

If i run a debug in Firefox i get following output:

{
    "error": "path_scope",
    "error_description": "Scope of the provided path is too wide."
}

Does someone maybe have an idea here ?

Installation of the GOG Galaxy Client in Lutris and then install the Game via Galaxy Client works just fine !

Greetings,
Henrik

Tl;Dr: In my case GOG’s API appears to use the securex file to indicate that an entry in the download list is fake, but I don’t know if you’re getting it for the same reason I am. If I’m right then the fix is probably for Lutris to ignore any entries that present the securex file as the file to download.

I think the securex file is something weird in GOG’s API. I haven’t seen it in Lutris before though, and I don’t seem to have any issues with Metro Exodus (probably because I have the wrong locale set) but I can reproduce it with Warhammer Skulls 2022 - Digital Goodie Pack:

I had previously seen the securex file when telling LGOGDownloader to download the digital goodie pack:

lgogdownloader download error
$ lgogdownloader --download --game 'warhammer_skulls_2022_digital_goodie_pack_goodies'              
Getting game names (2/2) 11 / 11
Getting game info 1 / 1
2023-Oct-31 03:38:15 [Thread #2] Download complete: skulls_panini_discount.zip (@ 0.00kB/s)
2023-Oct-31 03:38:15 [Thread #3] Download complete: skulls_koyo_discount.zip (@ 0.00kB/s)
2023-Oct-31 03:38:16 [Thread #0] Download complete: warhammer_wallpapers.zip (@ 0.00kB/s)
2023-Oct-31 03:38:16 [Thread #1] Download complete: warhammer_mark_of_chaos_art_book.zip (@ 0.00kB/s)
2023-Oct-31 03:38:16 [Thread #2] Download complete: skulls_cubicle7_discount.zip (@ 0.00kB/s)
2023-Oct-31 03:38:16 [Thread #2] Finished all tasks
2023-Oct-31 03:38:16 [Thread #3] Download complete: skulls_warhammer_art_discount.zip (@ 0.00kB/s)
2023-Oct-31 03:38:16 [Thread #3] Finished all tasks
2023-Oct-31 03:38:16 [Thread #0] Download complete: skulls_2022_warhammermerch_discount.zip (@ 0.00kB/s)
2023-Oct-31 03:38:16 [Thread #0] Finished all tasks
2023-Oct-31 03:38:17 [Thread #1] Download complete (HTTP response code said error (403)): securex
2023-Oct-31 03:38:17 [Thread #1] Finished all tasks
#0: Finished
#1: Finished
#2: Finished
#3: Finished

If I tell LGOGDownloader to give me details about the digital goodie pack it tells me that the securex file is the Warhammer Chaos Gate “goodie”, which is actually a separate game as shown on this page on gogdb (it also shows up on the “Downloads” page): Warhammer Skulls 2022 - Digital Goodie Pack - GOG Database

lgogdownloader details listing
$ lgogdownloader --list d --game warhammer_skulls_2022_digital_goodie_pack_goodies              
Getting game names (2/2) 11 / 11
Getting game info 1 / 1
gamename: warhammer_skulls_2022_digital_goodie_pack_goodies
product id: 1883489105
title: Warhammer Skulls 2022 - Digital Goodie Pack goodies
icon: https:
extras: 
	id: 91652
	name: Warhammer wallpapers
	path: /warhammer_skulls_2022_digital_goodie_pack_goodies/warhammer_wallpapers.zip
	size: 100663296

	id: 91649
	name: Warhammer: Mark of Chaos Concept Art Book
	path: /warhammer_skulls_2022_digital_goodie_pack_goodies/warhammer_mark_of_chaos_art_book.zip
	size: 206569472

	id: 91655
	name: Panini discount
	path: /warhammer_skulls_2022_digital_goodie_pack_goodies/skulls_panini_discount.zip
	size: 1048576

	id: 91658
	name: Koyo discount
	path: /warhammer_skulls_2022_digital_goodie_pack_goodies/skulls_koyo_discount.zip
	size: 1048576

	id: 91661
	name: Cubicle 7 discount
	path: /warhammer_skulls_2022_digital_goodie_pack_goodies/skulls_cubicle7_discount.zip
	size: 1048576

	id: 91667
	name: Warhammer Art discount
	path: /warhammer_skulls_2022_digital_goodie_pack_goodies/skulls_warhammer_art_discount.zip
	size: 1048576

	id: 91739
	name: Warhammer Merchandise discount
	path: /warhammer_skulls_2022_digital_goodie_pack_goodies/skulls_2022_warhammermerch_discount.zip
	size: 1048576

	id: 91643
	name: Warhammer Chaos Gate
	path: /warhammer_skulls_2022_digital_goodie_pack_goodies/securex
	size: 0

Unfortunately, gogdb seems to only check the en_US variants of games and I can’t convince GOG’s api to show me the files for the de_DE* locale, so I can’t confirm whether or not you get the securex file for the same reason I do.

*:I’m guessing that’s your locale?