Funnily it still works when opening the link in a browser where you are already logged in (i guess it uses the cookie auth instead of the parameters in that case, which causes the params to be ignored and the download to succeed)
Examples:
Open this link in a private browser tab, results in the error:
Code: Select all
https://www.factorio.com/get-download/1.1.110/alpha/win64-manual?username=asdff45&token=<token>Code: Select all
error: unable to download 'https://factorio.com/get-download/1.1.110/alpha/linux64?username=greaka&token=<miep>': HTTP error 403
response body:
<!doctype html>
<html lang=en>
<title>403 Forbidden</title>
<h1>Forbidden</h1>
<p>You don't have the permission to access the requested resource. It is either read-protected or not readable by the server.</p>
