Questions tagged [x-xsrf-token]

98 questions
0
votes
1 answer

android retrofit post logout request giving error 406 Not Acceptable : User is not logged in. ...on postman api works fine

I am using retrofit2 to logout in App but everytime it gives error406 : Not Acceptable : User is not logged in. . i am using retrofit custom header authentication . Here is my Code : logout code public void…
Naman
  • 39
  • 11
0
votes
1 answer

Why XSRF token is not being sent on cross-origin?

This is a snippet from the file http.js in the Angularjs 1.6.4 on github: var xsrfValue = urlIsSameOrigin(config.url) ? $$cookieReader()[config.xsrfCookieName || defaults.xsrfCookieName] : undefined; if (xsrfValue) { …
Alon Segal
  • 818
  • 9
  • 20
0
votes
2 answers

Jhipster 4 angular 4 ng2-file-upload return error 403 access forbidden becauze of CSRF

ng2-file-upload doesn't send CSRF access tokens alongside the upload request, so i get 403 access forbidden and my upload request is just rejected at once.
0
votes
1 answer

How to protect JWT against XSRF using HTTPOnly Cookies?

I have my Ionic/angular 2 app that is running on localhost:8000 The app will run eventually on browser platform. The app is calling a RESTFull api hosted on my local machine on https://adawy/api, where adawy is my hostname and defined in both hosts…
Amr Eladawy
  • 4,193
  • 7
  • 34
  • 52
0
votes
0 answers

PHP cURL - Request execution failed due to missing or invalid XSRF token

I am trying to login a user and save the session to a cookie file using the following PHP curl request: curl -c cookie-jar.txt -v --header "X-CSRF-Token: unsafe" --data "xs-username={{USER}}&xs-password={{PASS}}" "https://.../login.func" And…
Jebathon
  • 4,310
  • 14
  • 57
  • 108
0
votes
3 answers

Get X-CSRF-TOKEN in Angular 2

I use the standard way of using X-CSRF-TOKEN in Angular 2 like this in my app.module: provide: XSRFStrategy, useValue: new CookieXSRFStrategy('CSRF-TOKEN', 'X-CSRF-TOKEN') I am using "primeng" for file-upload. I need to set up the token by my self…
user2959870
  • 80
  • 6
  • 25
0
votes
1 answer

Adding Angular XSRF to Slim app - Is this sound?

I created an app using Slim 2 a while ago and I'm trying to add Angular. It's been going well so far, but I can no longer use the CSRF protection that I was using since Angular is handling all my post requests. Below is the Before Middleware I had…
user2530671
  • 428
  • 3
  • 13
-1
votes
1 answer

X-XSRF Token error for updated user

Say I have a module in my app that can change the username. Since the username is changed, the authcookie should be updated along with the XSRF token. Upon trying this, I am getting an error saying "The provided anti-forgery token was meant for…
jengfad
  • 704
  • 2
  • 8
  • 20
1 2 3 4 5 6
7