X-CSRF-Token issue

[guigui]

Hi community,

Since few days I'm trying to post new rules through the APIs and also also to test rules that I defined through the GUI through the APIs.

Each time I tried an API, I got the following error:

HTTP Status 403 – Forbidden

I should have a token issue.

Let's take the simplest example.

I got my X-CSRF-Token using postman:

As you can see, I "make" a get using the URL of the service + the termination xsrf-token.

In the request Header I add the key X-CRSF-Token and put "Fetch" in Value.

I received the X-CSRF-Token in the header of the answer

Then I simply used that token in the API swagger of the business rule service:

And then execute:

Maybe somebody already faced this kind of issue and solved it, please let me know.

Regards/

Guillaume

[guigui]

I certainly have a CSRF token issue

Like my token expires immediately or maybe I do not have right to trigger the GET to have my token, so this token is wrong for the service I try to call.

[Archana]

Hello Guillaume,

Yes with latest update in API Business Hub, there is a problem after executing the API. Incidents have been raised.
By the time it is fixed, please you any REST client like POSTMAN to execute the APIs. It will work

[Archana]

The issue is fixed. You can continue using API Business Hub