GET Request to QRS API using Postman returns Qlik Sense login page

[morenoju]

Hi all,

I've downloaded Postman desktop and I'm sending a GET request /qrs/app/full?Xrfkey=1234567890123456 adding the key X-Qlik-Xrfkey with 1234567890123456 as value.

I'm getting the Qlik Sense login page as response.

How can I authenticate so I get an actual response to the GET?

[stefanstoichev123 · Accepted solution]

There are few options:

- certificates - if you have access to QS certificates and port 4242 is accessible (from the machine where postman is running) then the certificates can be added to Postman  and start making requests on port 4242. For example: https://my-sense-instance.com:4242/qrs/about?Xrfkey=1234567890123456

- jwt - (personally i prefer this way) generate JWT token for a user and use virtual proxy that is set to JWT authentication and add the token to the headers request. Dont forget to add the virtual proxy prefix when making the requests https://my-sense-instance.com/prefix/qrs/about?Xrfkey=1234567890123456

- header - similar to JWT, create virtual proxy and set header authentication Personally i do not recommend this method because it might be quick and easy to set and use but its not secure (anyone with QMC access to the virtual proxies can use it with any user details)

- session cookie - if you have a valid proxy session then the session cookie can be added to postman. "Valid proxy session" means you have open Hub/QMC in a browser tab somewhere. From the browser tab (Chrome) DevTools -> Application -> Cookies you can find the session cookie

(All methods will require the X-Qlik-Xrfkey header to be present and its value to be equal to Xrfkey query param)

Stefan

[morenoju]

@stefanstoichev123, thank you for your detailed response. I used your preferred method (jwt) and it worked.