Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Expect XSRF token on validate API key endpoint of the Admin API #1068

Merged
merged 8 commits into from
Mar 5, 2025
Merged

Expect XSRF token on validate API key endpoint of the Admin API #1068

merged 8 commits into from
Mar 5, 2025

Conversation

tnotheis
Copy link
Member

@tnotheis tnotheis commented Mar 4, 2025

Readiness checklist

  • I added/updated unit tests.
  • I added/updated integration tests.
  • I ensured that the PR title is good enough for the changelog.
  • I labeled the PR.

@tnotheis tnotheis added the chore Some routine work like updating dependencies label Mar 4, 2025
@tnotheis tnotheis self-assigned this Mar 4, 2025
@MH321Productions
Copy link
Contributor

When using Bruno, I get the XSRF validation error (and therefore a 400 Bad Request):

The provided antiforgery token was meant for a different claims-based user than the current user.

The cookie and header get set and used during the request. Is this an error in Bruno?

@tnotheis tnotheis requested a review from jkoenig134 as a code owner March 4, 2025 15:21
jkoenig134
jkoenig134 previously approved these changes Mar 4, 2025
View reviewed changes
@tnotheis tnotheis changed the title Expect XSRF token on validate api key endpoint of the Admin API Expect XSRF token on validate API key endpoint of the Admin API Mar 5, 2025
@tnotheis tnotheis enabled auto-merge (squash) March 5, 2025 07:29
@tnotheis tnotheis merged commit 8fd8a24 into main Mar 5, 2025
22 checks passed
@tnotheis tnotheis deleted the expect-xsrf-token-on-validate-api-key-endpoint branch March 5, 2025 08:02
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@jkoenig134 jkoenig134 jkoenig134 approved these changes

@MH321Productions MH321Productions Awaiting requested review from MH321Productions

Assignees

@tnotheis tnotheis

Labels
chore Some routine work like updating dependencies
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
3 participants
@tnotheis @MH321Productions @jkoenig134