NordVPN. And I just discovered that now that the VPN is on again, it's no longer working and I can no longer access my favourited and recent books in my library as before. The VPN has to be off.
UPDATE: Identified the cause of the Encounter Builder failing to load
After extensive troubleshooting, I've isolated the issue to my VPN connection (NordVPN). The Encounter Builder loads normally when NordVPN is disconnected, but fails when the VPN is active.
Troubleshooting performed:
NordVPN Threat Protection: Already disabled. Enabling it made no difference.
VPN server locations: Tested multiple server locations, both inside and outside the U.S. All produced the same failure.
VPN protocols: Tested all four available protocols, including NordLynx and OpenVPN. No improvement.
Custom DNS: Tested Google's public DNS servers (8.8.8.8 and 8.8.4.4). No improvement.
Browser based ad blocking: Confirmed disabled.
NordVPN split tunneling: Excluding my specific web browser from the VPN tunnel immediately resolved the problem, confirming that the issue is associated with traffic passing through the VPN.
Developer Console findings:
Using my browser's developer tools, I identified a failed CORS preflight request to the following endpoint:
Comparing the Network results with NordVPN enabled and disabled produced the following:
Request
NordVPN Enabled
NordVPN Disabled
OPTIONS (CORS preflight)
403 Forbidden
204 No Content
POST (API request)
CORS error / failed
200 OK
Encounter Builder
Fails to load
Loads normally
With NordVPN connected, the API's preflight request returns HTTP 403. Because the preflight fails, the browser blocks the subsequent API request, resulting in the CORS errors observed in the Developer Console.
With NordVPN disconnected, the same preflight returns HTTP 204, the API request completes successfully with HTTP 200, and the Encounter Builder loads normally.
Conclusion:
The evidence strongly suggests that D&D Beyond's API or an upstream security service is rejecting requests associated with NordVPN traffic. The resulting CORS errors appear to be a consequence of that rejection rather than a browser configuration issue.
I cannot determine whether the 403 response originates from D&D Beyond's own infrastructure, its CDN/WAF, or another intermediary.
Request to D&D Beyond developers:
Could someone investigate why the api.dndbeyond.com/feature-flags endpoint returns HTTP 403 on CORS preflight requests originating through NordVPN?
Ideally, VPN users should be able to access the Encounter Builder without disabling their VPN or excluding their entire browser from VPN protection.
For now, I intend to use a separate browser excluded from NordVPN as a workaround, but I'd appreciate a proper resolution.
Hopefully, these findings will help identify the underlying issue for other VPN users experiencing the same problem.
Thank you! Fixed!
I received a very generic response from my submitted ticket about disabling extensions, antivirus, etc, etc. This just saved me a ton of time :)
-
View User Profile
-
View Posts
-
Send Message
ModeratorOut of curiosity, what VPN were you folks using?
Need help with D&D Beyond? Come ask in the official D&D server on Discord: https://discord.gg/dnd
NordVPN. And I just discovered that now that the VPN is on again, it's no longer working and I can no longer access my favourited and recent books in my library as before. The VPN has to be off.
Same as vetmandm, NordVPN.
Nord here as well.
I am having the same issue too. Have had for the past 2 weeks now.
Anybody get any updates when it will be fixed?
UPDATE: Identified the cause of the Encounter Builder failing to load
After extensive troubleshooting, I've isolated the issue to my VPN connection (NordVPN). The Encounter Builder loads normally when NordVPN is disconnected, but fails when the VPN is active.
Troubleshooting performed:
NordVPN Threat Protection: Already disabled. Enabling it made no difference.
VPN server locations: Tested multiple server locations, both inside and outside the U.S. All produced the same failure.
VPN protocols: Tested all four available protocols, including NordLynx and OpenVPN. No improvement.
Custom DNS: Tested Google's public DNS servers (8.8.8.8 and 8.8.4.4). No improvement.
Browser based ad blocking: Confirmed disabled.
NordVPN split tunneling: Excluding my specific web browser from the VPN tunnel immediately resolved the problem, confirming that the issue is associated with traffic passing through the VPN.
Developer Console findings:
Using my browser's developer tools, I identified a failed CORS preflight request to the following endpoint:
https://api.dndbeyond.com/feature-flagsComparing the Network results with NordVPN enabled and disabled produced the following:
With NordVPN connected, the API's preflight request returns HTTP 403. Because the preflight fails, the browser blocks the subsequent API request, resulting in the CORS errors observed in the Developer Console.
With NordVPN disconnected, the same preflight returns HTTP 204, the API request completes successfully with HTTP 200, and the Encounter Builder loads normally.
Conclusion:
The evidence strongly suggests that D&D Beyond's API or an upstream security service is rejecting requests associated with NordVPN traffic. The resulting CORS errors appear to be a consequence of that rejection rather than a browser configuration issue.
I cannot determine whether the 403 response originates from D&D Beyond's own infrastructure, its CDN/WAF, or another intermediary.
Request to D&D Beyond developers:
Could someone investigate why the
api.dndbeyond.com/feature-flagsendpoint returns HTTP 403 on CORS preflight requests originating through NordVPN?Ideally, VPN users should be able to access the Encounter Builder without disabling their VPN or excluding their entire browser from VPN protection.
For now, I intend to use a separate browser excluded from NordVPN as a workaround, but I'd appreciate a proper resolution.
Hopefully, these findings will help identify the underlying issue for other VPN users experiencing the same problem.
When I click Encounters, I just get a blank page
-
View User Profile
-
View Posts
-
Send Message
ModeratorThis is apparently caused by Nord VPN.
Need help with D&D Beyond? Come ask in the official D&D server on Discord: https://discord.gg/dnd
I am also getting the same symptom and mitigation using Bitdefender VPN. With VPN enabled, get blank page. With VPN disabled, works as expected.