Ajax bugzilla webservice bug.get是否需要身份验证？

我正在使用jsonrpc访问bugzilla webservice的bug.get功能，但它正在返回：

错误：403 禁止的内容类型：text/xml 没有数据

我对我的服务器进行ajax调用，然后服务器充当代理并向位于单独域上的bugzilla webservice发送POST请求

var obj={
    'method':'Bug.get',
    'params':{
        'id':bug_list
    },
    'id':bug_list
};
var message=$.toJSON(obj);

$.ajax({
    "contentType":"application/json",
    "data": message,
    "dataType": "json",
    "url": "bug_reply.cgi",
    "type": "post",
    error: function(d, ts, er){
        console.log("OH WOE! D: D: D: D: D: D: D: D: D:"+d+' '+ts+' '+er);
    },
    success: function(d, ts){
        console.log(d);
    }
});

cgi：

---

我只是用了卷发来代替，效果很好

#! /usr/bin/perl

use strict;

use lib qw(.);
use CGI qw(:standard Vars);
use vars qw($cgi $template $vars);

use Bug;
use Bugzilla;
use Bugzilla::Search;
use JSON::XS;
use LWP::UserAgent;
use CGI qw(:standard);


# Include the Bugzilla CGI and general utility library.
require "CGI.pl";

my $ua = LWP::UserAgent->new;


my %form = Vars();
if($ENV{REQUEST_METHOD} eq "POST")
{
    my $URL='http://bugs1.eng.proofpoint.com/bugzilla-3.6.4/jsonrpc.cgi';

    my $q = new CGI;
    #my $query =
    my $data=$form{'POSTDATA'};

    my $req=HTTP::Request->new(POST=>$URL);
    $req->content_type('application/x-www-form-urlencoded');
    $req->content($data);

    my $ua = LWP::UserAgent->new;
    my $res = $ua->request($req);

    if ($res->is_success) {
        printf "Content-Type: %s\n\n", $res->header('Content-Type');
        print $res->content;
    } 
    else {
        printf "Content-Type: text/plain\n\n";
        print "Error: " . $res->status_line . "\n";
    }

    print $cgi->header(-type => 'text/xml');
    print $res->decoded_content;
}