CSRF token in REST message

Vanit
Mega Contributor

‎11-27-2014 02:16 AM

HI,

 

We are trying to retrieve the CSRF token from the REST endpoint in servicenow dublin patch6 release.

 

CSRF token is being sent when we pass the parameter fetch in the POST man by passing the parameter "x-csrf-token" :"Fetch".

 

But I passed the same header in Servicenow its not sending me CSRF token in the response. Can anyone guide me to retrieve this.

 

Thanks & Regards

Vani

0 Helpfuls
  • 2,392 Views
3 REPLIES 3

kevinme
Mega Contributor

‎03-12-2015 02:05 AM

Hi Vani



Were you able to find a solution for this problem?



Kevin


0 Helpfuls

Vanit
Mega Contributor
In response to kevinme

‎03-13-2015 01:27 AM

Hi,



No. we are still searching for solution. Could you please guide us on this.



Regards,


Vani Talluri


+61407305002


0 Helpfuls

kevinme
Mega Contributor
In response to Vanit

‎03-25-2015 06:41 AM

Hi



I found out, that a new user token is returned in the response header if an incorrect token is sent with the request. This is visible in Chrome Developer tools or something similar. The problem is, that this header is not accessible by script...or at least I don't know how. I guess the problem is, that this is not allowed (Access-Control-Allow-Headers).



HTTP access control (CORS) - HTTP | MDN



Maybe you find a solution



Kevin


0 Helpfuls