Issue 403 after steam login on own website

[Chewbacca]

Hello there,
I implemented a steam login on my website with PHP, which works perfectly on my own machine, but as soon as I upload it to my plesk website, I always get a 403 Forbidden after confirming the log in on steam.

The website is forcing HTTP to HTTPS, but its not denying HTTP requests.

thehairy.org

 

[Chewbacca]

 

[Bitpalast]

Is the document root directory owned by

psaserv:<subscription username>

and are all files and subdirectories that descend from that path owned by

psacln:<subscription username>

and is the document root directory set to permisssions 0750?

Are you using Nginx-only hosting in combination with PHP-FPM served by nginx? Or are you using Proxy mode (nginx+Apache) in combination with PHP-FPM served by Apache?

Do you have any rewrite rules in your .htaccess file? Have you checked that all of these are correct, that the scripts are indeed accessible and are indeed delivering a result?

Do you generate images or other static files "on the fly" by PHP-scripts that mimic being an image or other static file? Are you using Nginx caching in combination with this? It might not work that way.