I am facing a 403 Forbidden error when calling the Shiprocket API from my Railway-hosted production server, while the same code works perfectly on my local development server.

This issue is blocking live order and webhook-related operations.

Shiprocket API requests work perfectly on localhost

• Same environment variables, same API credentials

• Same request headers, payload, and authentication logic
  
  What I’ve Already Checked

  • Environment variables are correctly set on Railway

  • Shiprocket token is being generated successfully

  • Authorization headers are properly passed

  • No hardcoded localhost URLs

  • No CORS issues (server-to-server request)

  • Same Node version tested locally