topic Re: How can i fetch a csrf token with an access token? in Integration, Extension & APIs

How can i fetch a csrf token with an access token?

nicefella — Thu, 03 Mar 2022 13:49:09 GMT

Hi,

I have integrated an OAuth2 flow on my Qlik Sense Business tenant and I can successfully retrieve an access_token.

But I can't make it work when sending this token in Authorization Bearer header to get a csrf token which I aim to use it in my websocket connection later.

const response = await fetch( 'https://mytenant.eu.qlikcloud.com/api/v1/csrf-token', { method: 'GET', credentials: 'include', headers: { Authorization: `Bearer ${accessToken}`, }, }, );

It simply returns a 404 Not Found.

But I can use this very same token to fetch current user in

https://mytenant.eu.qlikcloud.com/api/v1/users

and it successfully gives me my user info.

What am I doing wrong? Or, is this an unsupported feature?

I also tried to include qlik-web-integration-id in my request header but no success either.

Re: How can i fetch a csrf token with an access token?

Damien_V — Fri, 11 Mar 2022 13:43:00 GMT

The error is misleading but basically the csrf-token endpoint does not support that authentication type, it's only meant for authentication through an interactive Identity Provider.

Re: How can i fetch a csrf token with an access token?

ashish_banjare — Thu, 03 Aug 2023 15:17:37 GMT

Hello Team,

Same error i am facing,

Error : CSRF token not supported for given authentication type. 400 Bad request.

I have Client Credentials access token in Qlik Saas Business Portal Where i can not configure Identity provider. how can we solve it,

Thanks