CPI 403 Forbidden error When Test CPI service in Postman

[MetinD]

Hi

We are taking 403 forbidden error sometimes when we test CPI service in Postman since last week.

For example, last night when I tested the service ,it was successful but I test the service today again, getting 403 forbidden error .What could be the cause of this error.Any idea?

Note: I used same SUSER when test the services and it has EsbMessage.send role.

[MetinD · Accepted solution]

Hi,

The problem solved.İt was about my Postman.I tested the service in soap ui.It is successfull now.

Regards

Metin

[brenm1989]

In my case, I had to add the CSRF - Token!

Following steps are required:

1. add a KEY / VALUE pair in the header ("X-CSRF-Token" / "fetch")
2. send the GET request, where you receive the CSRF-Token in the response header
3. replace "fetch" in the header VALUE of "X-CSRF-Token" with the new received CSRF - Token

After that I could POST my payload via Postman to CPI.

[manoj_khavatkopp]

Hi Metin,

If using an HTTP sender adapter can you please cross check if CSRF token auth is disabled?

Thanks,

Manoj

[MetinD]

Hi,

Thanks for your answer.Yes, I used HTTPS and CSRF was disabled.I test the service before more than one and İt was successull.But since last week, getting forbidden error sometimes.

When I test other service again in this days which I test before and they was successfull, they are also getting the error.