Token management, programmatically - CSFR?

[ganncamp (G Ann Campbell)]

Hi,

Are all APIs returning like this, or only this API? Wrong CSFR in request usually points to a reverse proxy mucking about with cookies.

Wrong CSFR in request

The issue you’re encountering is because the cookie XSRF-TOKEN has his attribute HttpOnly set to true, whereas it should be set to false. There’s probably something in your configuration that set all HttpOnly attributes to true. You need to update this in order to let this value to false for XSRF-TOKEN.

 
HTH,
Ann