Receiving 403, 'CSRF token mismatch', errors from POST commands

Within the last 2 weeks I have started receiving 403 return codes for every REST API POST command attempted via Python scripts in our Dev environment. All of these scripts have executed successfully multiple times prior to something changing in the environment.

I have tested the POST commands via the REST API GUI and via Postman, all work. The problem definitely seems to be related to the Python to Collibra REST API environment.

Has anyone experienced this and come up with a resolution?

Les Marsyla

Posted 1 year ago · Edited 1 year ago·Last reply 1 year ago

2 comments

Lakhbir Singh

·1 year ago · Edited

For us, everything works in non prod regions. It's same python code but when deployed to prod. it breaks on csrf mismatch..

This seems to work.

Get the session by calling auth/sessions api
Get the csrfToken from the response.
Pass the csrfToken in the headers

    def signIn(self):
        url = self.url + 'auth/sessions'
        session = requests.Session()
        response = session.post(
            url,
            data=self.userInfo,
            headers= {
                "Content-Type":"application/json",
                "Authorization":"Authorize" ,
                "accept-encoding":"identity",
                "User-agent":"curl/7.29.0"
                },
            proxies= self.proxy

        )

        self.session = session
        token = response.json()
        self.csrfToken = token["csrfToken"]
        return session

//pass the CSRF token in the header upon call.
headers= {"Content-Type": "application/json", "X-CSRF-TOKEN": self.csrfToken},

daverichard

·1 year ago · Edited

We have run into this when the API user account password expired. There is no notification that I have seen, but it could be because of a shared email address. The fix was to update the password associated with the account.