I am facing a 403 Forbidden error when calling the Shiprocket API from my Railway-hosted production server, while the same code works perfectly on my local development server.

This issue is blocking live order and webhook-related operations.

Shiprocket API requests work perfectly on localhost

• Same environment variables, same API credentials
• Same request headers, payload, and authentication logic

What I’ve Already Checked

• Environment variables are correctly set on Railway
• Shiprocket token is being generated successfully
• Authorization headers are properly passed
• No hardcoded localhost URLs
• No CORS issues (server-to-server request)
• Same Node version tested locally