cancel
Showing results for 
Search instead for 
Did you mean: 

CSRF token not returned to API Manager

Former Member
0 Kudos

Hi Gurus,

Please help me in the issue ,I am facing in API Manager

currently I created a service and was successfully able to get xcsrf token when i run the GET method in REST(chrome)

however,I am unable to get the x-csrf token back in the IBM API manager.

Any suggestions,on where I went wrong

Thanks in advance

Lakshmi

Accepted Solutions (0)

Answers (2)

Answers (2)

Former Member
0 Kudos

Hi Ram and Maksim,

Thanks for your response.i was unable to get the RESPONSE of CSRF token.

So,i switched to chrome advanced REST client,it was much easy and responsive

closing this thread,as i had my csrf token got back in chrome

Thanks for the guidance

Lakshmi

Former Member
0 Kudos

Lakshmi,

Make  sure you are sending  value "fetch" in the request header for "x-csrf-token".

I am thinking you are already doing it as it worked on REST client but double check and see if this is being done on the API manager.

-Ram.

Former Member
0 Kudos

Thanks Ram,

for the quick response,yes i indeed passed the X-CSRF-Token to the APIM.

Will it make a difference,if in APIM i am using JSON format and in REST(chorme) i use XML?

Former Member
0 Kudos

Lakshmi, the JSON/XML decision should not have any impact on the csrf token. The screenshot you posted is not showing what values are being  passed , can you screenshot the values what you are sending.

And even easier, turn on the trace on gateway and check if your request headers show "fetch" like in below example.

Former Member
0 Kudos

Hi Ram,

Here is the screenshot of the values,I  passed

As suggested by you,let me RUN the TRACE in SEGW.

.....................

ok i am back,I tried to do the Trace in SEGW by looking out in scn .I donot know,how to do the Trace,similar to what you did.

will you please let me know,how to get the screen,as listed by you?/

Thanks much

Lakshmi

former_member182372
Active Contributor
0 Kudos

Lakshmi, token is returned as response header, what you show are requests