403 Forbidden with WooCommerce REST API v2

I’m also having trouble with this, working as intended if iThemes Security is inactivated.

I discovered the issue in my case to be the hackrepair.com feature. Basically it blacklists some of the most common user agent strings associated with bots used to hack websites. It also blocks any requests with an empty user agent string. I simply added a custom user agent string to my posts and now they go through as expected.

Alternatively you could just disable this feature in iThemes security settings. There is also a method to disable the empty user agent string in the .htaccess file (quick google search can find it). Unless you know what you are doing, I strongly discourage modifying the .htaccess file on your web server.

Yes, I found the same solution. I have an external service doing requests so cannot modify the headers. So the solution for now is to disable the feature.