Creating Ticket via Conversation AI

[mracantonius]

Hi,

I'm trying to create a simple connection between C4C and Conversation AI with following OData payload via Actions on a Skill.

on C4C side, i can see an error saying:

HTTP/1.1 403 Forbidden
Content-Type: text/plain; charset=utf-8
Content-Length: 28
x-csrf-token: Required
c4c-odata-response-time: 20  ms
CSRF token validation failed

As per other blogs regarding CSRF, I need to trigger GET first, but do we have specific steps here? Note that I'm directly connecting SAP Conversation AI to C4C here.

Thanks in advance!

Marc Hirang

[JonasB]

Hi Marc,

you would first need to perform a GET call with the header "X-CSRF-Token: fetch" and afterwards in the actual POST call reference the cookie and x-csrf token like this:

X-CSRF-Token:

{{api_service_response.default.headers.x-csrf-token}}

Cookie:

{{join api_service_response.default.headers.set-cookie ';'}}

Regards
Jonas