Unanswered

Unable to send x-csrf-token in POST request

(2) Share

Report

Posted on by Community Power Pla... Microsoft Employee

Hi Experts,

I am trying to send POST request using HTTP connector. The Odata API required x-csrf-token to be sent as well. I could fetch token from previous GET request and trying to pass it to subsequent POST request. Though I could see it as input, API returns with a message 403 and CSRF token validation failed. The same works with POSTMAN. Please suggest.

Input :

Raw input :

Output

Regards,

Categories:

Building flows

I have the same question (1)

All responses (8)

Answers (0)

japel 4 on at

Like (1)

Report
Copy link

Link copied!

Had the same issue for days and figured it out today:

You need to submit the session cookie, which you will find in the "set-cookie" header of your GET request.
This needs to be passed to the POST request. Unfornately this can't be done using a custom connector.
I used a normal http request for this. You can set a Cookie Attribute there.
For the info from "set-cookie" you need to replace "," with ";" before passing it to your POST-Request.

Was this reply helpful? Yes No
TM82 6 on at

Like (0)

Report
Copy link

Link copied!

can you plz elaborate and give the syntax for the post method

Was this reply helpful? Yes No
VDI 337 on at

Like (0)

Report
Copy link

Link copied!

Is it resolve? I am also getting the same error.

Was this reply helpful? Yes No
Abdollar 3 on at

Like (0)

Report
Copy link

Link copied!

Yes, it has been resolved.
Modify this expression to yours "replace(outputs('Get_product')['headers']['Set-Cookie'],',',';')" to replace commas in your set-cookie.

Was this reply helpful? Yes No
VDI 337 on at

Like (0)

Report
Copy link

Link copied!

Thanks, I have replace the commas to semicolon, but still I am getting the CSRF token validation failed error.
I am trying to connect to on-premise SAP System via data gateway and already did all the configuration but still unable to send cookies.

Was this reply helpful? Yes No
PowerPlatChadd 13 on at

Like (0)

Report
Copy link

Link copied!

Running into same issue, did you ever figure this out?

Was this reply helpful? Yes No
imranimzzy 24 on at

Like (0)

Report
Copy link

Link copied!

Here is the screenshot of how you pass the cookie getting from the GET x-csrf-token call. Please accept this as a solution if it resolves your query.

1. Getting the csrf token
2. In Compose replacing the set-cookie value ',' with ';'.
3. POST call by sending the Cookie value.

2 people found this reply helpful.

Was this reply helpful? Yes No
PC-28030728-0 2 on at

Like (0)

Report
Copy link

Link copied!

Hi Guys, I'm new to power apps. I'm using custom connection to generate CSRF token. I managed to get 200 response but the x-csrf-token is not included in the Header respone. Appreciate if someone can help me. Big help!

Was this reply helpful? Yes No