Question Re: HTTP request failed (403 Forbidden): CSRF token validation failed in Technology Q&A

HTTP request failed (403 Forbidden): CSRF token validation failed

prajeshdesai — Thu, 10 Sep 2020 05:51:52 GMT

Hey Gurus,

I'm facing this weird issue in my custom UI5 application,

using OData model,

Request POST:

Payload Error:

Every thing is working fine in GW_CLIENT and POSTMAN.

Only facing issue when calling from UI5 app in chrome with disable cross.

Please help me with this, as i tried almost every thing and no luck.

Re: HTTP request failed (403 Forbidden): CSRF token validation failed

jhodel18 — Fri, 11 Sep 2020 14:52:09 GMT

Hi Prajesh,

I don't see any session cookies from your Request Header so it's highly likely that is the issue.

When testing in Postman, the tool will handle the token for you. To simulate the error in postman, before sending the POST request, try deleting the cookies and you will also get the 403 error.

Re: HTTP request failed (403 Forbidden): CSRF token validation failed

prajeshdesai — Mon, 14 Sep 2020 05:39:46 GMT

Thanks jhodel18, I'm able to rectify that my cookies are blocked by chrome due to SameSite=Lax.

For time being I used client side workaround to resolved this,

Step 1: go to chrome://flags

Step 2: Disable SameSite by default cookies.

Again thanks for your great help.

Re: HTTP request failed (403 Forbidden): CSRF token validation failed

jhodel18 — Mon, 14 Sep 2020 09:36:13 GMT

You're welcome Prajesh!

If my answer helped you on finding the root cause of your issue, don't forget to mark the answer as accepted. Thanks!