OAuth session missing when starting approval worklfow

[anete]

Hi,

When using workflow from the live process content "Manage Invoices without Purchase Order" I get this error when sending invoice for approval for service endpoint "Workflow".

Workflow is started by the technical user from the destination key. Do you have an idea why the session is needed here and how to add it?

The OAuth token request to URL 'https://xxxxxx.authentication.eu10.hana.ondemand.com?grant_type=client_credentials' failed with HTTP status code 403 (Forbidden) and response body '{"error":"Could not verify the provided CSRF token because your session was not found."}'

Destination "Workflow" is set up with OAuth2ClientCredentials

[tobias_breyer]

Hi Anete,

could you look up the service task in the model and check whether there is nothing given for the XSRF token path?

Something seems to trigger XSRF-token-related code in the authentication (XSUAA) end-point.

But XSRF protection is uncommon in relation to OAuth, as it needs a session and sessions are a concept on CF basically only when you have a UI (which there is none here). For example, the app router supplies respective functionality.

Thanks and regards,

Tobias

[anete]

After double checking authentication endpoint setup it was incomplete Token service URL: /oauth/token was missing from the end of the URL.