Question Re: Build Apps POST call - HTTP 403 Error (Invalid CSRF T... in Technology Q&A

Build Apps POST call - HTTP 403 Error (Invalid CSRF Token)

JG_LEE — Thu, 26 Dec 2024 07:57:34 GMT

Hello everyone.

I need your help on something about x-csrf-token problem.

I am making an web application that creates Sales Order to S/4HANA Cloud Public Edition by Build Apps.

Connection to S/4HANA is made by destination, and web application is deployed to my BTP subaccount's HTML5 Repository.

Screenshot under is the destination I set to S/4HANA Cloud Public Edition's "Sales Order(A2X)" OData V2 api.

Type : HTTP

URL : https://{tenant}-api.s4hana.cloud.sap/sap/opu/odata/sap

Proxy Type : Internet

Authentication : Basic

AppgyverEnabled : true

BuildApps.RequiresCsrf : true

HTML5.DynamicDestination : true

sap.applicationdevelopment.actions.enabled : true

sap.build.usage : odata_gen

sap.processautomation.enabled : true

WebIDEEnabled : true

Plus, I

As you can see, I added "BuildApps.RequiresCSRF = true" to my destination so I can see the CSRF token settings too.

However, as I deploy this application and try to create Sales Order, error occurs and I can see this error message in my HTML5 repository.

What should I do to fix this problem??

Re: Build Apps POST call - HTTP 403 Error (Invalid CSRF T...

CoenAmista — Tue, 31 Dec 2024 09:53:40 GMT

I have the same error when deploying the app in Workzone standard following the standard SAP Build procedure.

I created an app in SAP Build that I deployed in SAP Build to my Workzone instances.

This is app is succesfully added to my HTML5 repository and shown in workzone. There I assigned the app to the role Everyone, to the correct group and to the correct portal page. It appears on the page. When clicking on the tile I have the error:

When I go to the HTLM5 repository to have a look at the error log. I have exactly the same error:

After I deployed the app and received the error I removed an existing app from the portal page. After adding it again (without removing it anywere else) it give the same error.

Different situation but same error as above. Since this I followd the the SAP Build best practice it should work out of the box. And it worked in the past. It there a misconfiguration in automatically created BTP destination?

Re: Build Apps POST call - HTTP 403 Error (Invalid CSRF T...

CoenAmista — Tue, 14 Jan 2025 13:24:09 GMT

I solved the issue.

I removed the app from the HTML5 repository in Workzone.
I redeployed the app from SAP Build apps
Refreshed the HTML5 repository in Workzone
Added the app to the role everyone en the portal page

It worked. But also the other apps who had the same issue worked again.

Re: Build Apps POST call - HTTP 403 Error (Invalid CSRF Token)

ShyamBorgikar — Fri, 04 Apr 2025 10:11:54 GMT

We are also facing the same error after the app is deployed. Did you manage to solve this error?