Forbidden
A download-related request returned 403 with the short “Forbidden.” text — often private file stream/preview when the viewer is not the owner and did not go through the public grant flow.
Why this happens
Catch-all unauthorized access on /{id}/stream and preview routes for private files. Richer gates usually say something more specific (mint first, password, plan disabled, geo, and so on). Admin APIs also reuse a generic forbidden string outside downloads.
Diagnose and fix
1. Use the public download page and Create download link for shared files.
2. Sign in as the owner to stream private files directly.
3. Do not hotlink /stream on private content.
4. If you expected a plan/geo message, check those toggles — you may have hit a different path.