Hub service health check endpoint, response "Forbidden"

[henrikalmen]

In the knowledge base article Qlik Sense for Windows: Service Dispatcher main services healthcheck endpoints the "HUB Service" is listed (GET /api/hub/about)

After upgrading to Qlik Sense Enterprise on Windows version May 2025 patch 5 (from version May 2024), i get response status 403 Forbidden instead of the usual response. The request is authenticated, so it's not a login issue. And I can verify that by doing the exakt same request to our production environment that has not yet been upgraded, I get the expected response there.

I'm not experiencing any problems in the hub or anywhere else, the installation seems to be working just fine. But this health check response indicates an unhealthy status.

What should I check? What might be wrong? 

[John_Sathya]

I could see the same result when I tested. @henrikalmen it's best to create a support ticket so we can check on this.

[henrikalmen]

Ok, case number 00403768.

[henrikalmen · Accepted solution]

Apparently since sometime between the mentioned versions of QSEoW, a requirement for xsrf-key has been added to this endpoint. Adding a x-qlik-xrfkey to url and header resolves the issue.