Cannot block other users

I tried to block a fellow user, but that did not work: when I opened the hamburger menu on their profile page (https://lichess.org/@/<user>) and chose "Block", left-clicking silently did nothing. Closer inspection reveals that the menu item actually is a link to https://lichess.org/api/rel/block/<user> which is a 404 page.

Anyone else seeing that? In case it matters, my list of blocked users is currently empty.

Other method:
1.Go to the user's profile page.
2.Copy the username from the URL (e.g., @null<user>).
3.Go to your profile settings by clicking on your username in the top right corner and selecting "Profile".
4.Navigate to the "Privacy" tab.
5.Manually add the username to the block list.
Another method:
Open your command line interface.
Run the following command, replacing <user> with the actual username and ensuring you are logged in:
curl -X POST https://lichess.org/api/rel/block/<user> -b <your_cookie>

@NoOneCanBeatMe4 said in #2:

Other method:
1.Go to the user's profile page.
2.Copy the username from the URL (e.g., @null<user>).
3.Go to your profile settings by clicking on your username in the top right corner and selecting "Profile".
4.Navigate to the "Privacy" tab.

Those steps are equivalent to visiting https://lichess.org/account/preferences/privacy, right?

5.Manually add the username to the block list.

There is no block list, perhaps it is not displayed because there are currently not any blocked users.

Another method:
Open your command line interface.
Run the following command, replacing <user> with the actual username and ensuring you are logged in:
curl -X POST lichess.org/api/rel/block/<user> -b <your_cookie>

I suspect that I need to add "https://" at the beginning of the URL, and <your_cookie> is the lila2 cookie? Probably I am doing something wrong because I get "Cross origin request forbidden" as response.

@zwenna Ensure you include the https:// prefix in the URL.
To successfully send a request using cURL, you need to include the authentication cookies. The lila2 cookie is correct for authentication, but make sure you have the correct cookie value.
curl -X POST https://lichess.org/api/rel/block/<user> -H "Cookie: lila2=<your_cookie>"
Replace <user> with the username of the person you want to block and <your_cookie> with your actual lila2 cookie value.
to get the lila2 cookie, you can use your browser’s developer tools:
1.Open the developer tools (F12 or Ctrl+Shift+I).
2.Go to the "Network" tab.
3.Perform a login action on Lichess.
4.Find the request in the "Network" tab and check the "Cookies" section in the request details to get the lila2 cookie value.
CORS is so shitty...
To avoid CORS issues:

Use server-side requests instead of client-side requests, or
Ensure that you are logged in and the request includes the proper authentication headers or cookies.

Anyway, if you prefer not to use cURL, you can use browser developer tools to execute the block action.

@NoOneCanBeatMe4 said in #4:

@zwenna Ensure you include the https:// prefix in the URL.
To successfully send a request using cURL, you need to include the authentication cookies. The lila2 cookie is correct for authentication, but make sure you have the correct cookie value.
curl -X POST lichess.org/api/rel/block/<user> -H "Cookie: lila2=<your_cookie>"
Replace <user> with the username of the person you want to block and <your_cookie> with your actual lila2 cookie value.

Tried that, but to no avail, I still got "Cross origin request forbidden" as response.

to get the lila2 cookie, you can use your browser’s developer tools:
1.Open the developer tools (F12 or Ctrl+Shift+I).
2.Go to the "Network" tab.
3.Perform a login action on Lichess.
4.Find the request in the "Network" tab and check the "Cookies" section in the request details to get the lila2 cookie value.

That did not work for me, however the lila2 cookie can be found under "Storage" -> "Cookies".

Anyway, if you prefer not to use cURL, you can use browser developer tools to execute the block action.

Took me a while to figure out how to do that, but it finally worked. Still, https://lichess.org/account/preferences/privacy does not show the blocked user. However, under https://lichess.org/rel/blocks it is visible.

Meanwhile I have restarted my browser, and now blocking and unblocking a user on their profile page works again, go figure...

Thanks for the help!

@zwenna No problem, have a nice day!

@zwenna said in #1:

I tried to block a fellow user, but that did not work: when I opened the hamburger menu on their profile page (@null<user>) and chose "Block", left-clicking silently did nothing. Closer inspection reveals that the menu item actually is a link to lichess.org/api/rel/block/<user> which is a 404 page.

Anyone else seeing that? In case it matters, my list of blocked users is currently empty.
You can also go to the chat of the user and block the user.
You dont need to send any msg.

@zwenna said in #1:

I tried to block a fellow user, but that did not work: when I opened the hamburger menu on their profile page (@null<user>) and chose "Block", left-clicking silently did nothing. Closer inspection reveals that the menu item actually is a link to lichess.org/api/rel/block/<user> which is a 404 page.

Anyone else seeing that? In case it matters, my list of blocked users is currently empty.
I tried to do the blocking by your method its work fine for me.

Since you’ve mentioned that the link is incorrect and leads to a 404 page, it might be an issue with Lichess’s website or API. You can try manually accessing the correct API endpoint if you’re familiar with using APIs, though this is more advanced.

@hopedav said in #9:

Since you’ve mentioned that the link is incorrect and leads to a 404 page, it might be an issue with Lichess’s website or API. You can try manually accessing the correct API endpoint if you’re familiar with using APIs, though this is more advanced.
I tried blocking @hopedav and it worked. No 404 error page appeared.
( Sorry Mr. @hopedav ) But ofc, I had to unblock him again.
The problem must be on your end.