I'm having issues invoking the API request to en-queue a new on-demand request as per the API (https://help.qlik.com/en-US/nprinting/17.2/APIs/NP%20API/#ondemandRequestsPost).
Authentication is successful and I am able to query Apps, Filters, Reports and On-Demand Requests. However, when I invoke the API to create an On-Demand request I receive the following error from the server:
{
"title": "Forbidden",
"description": "REVEL_CSRF: tokens mismatch."
}
This error occurs regardless of the payload being supplied. Even supplying no payload generates the same result. Reviewing the error description it appears to relate to a Cross-Site Request Forgery (CSRF) exception where the authentication token associated with the current login session is different.
I'm using .NET Framework v4.6.1 to query the service. The relevant code is as follows (edited for brevity):
public class NPrintingService
{
private HttpClient Client { get; set; }
public NPrintingService(string serviceUrl)
{
var httpClientHandler = new HttpClientHandler { UseDefaultCredentials = true };
var client = new HttpClient(httpClientHandler)
{
BaseAddress = new Uri(serviceUrl)
};
client.DefaultRequestHeaders.Accept.Clear();
client.DefaultRequestHeaders.Accept.Add(new MediaTypeWithQualityHeaderValue("application/json"));
this.Client = client;
}
public async Task<bool> Authenticate()
{
var response = await this.Client.GetAsync("api/v1/login/ntlm");
if (response.IsSuccessStatusCode)
{
return await Task.FromResult(true);
}
return await Task.FromResult(false);
}
public async Task<string> CreateOnDemandRequest()
{
HttpResponseMessage response = await this.Client.PostAsJsonAsync("api/v1/ondemand/requests", null);
if (response.IsSuccessStatusCode)
{
var content = await response.Content.ReadAsStringAsync();
return content;
}
//var error = await response.Content.ReadAsStringAsync(); // NOTE: This code is used to retrieve the underlying 'REVEL_CSRF: tokens mismatch' error
throw new ApplicationException($"({response.StatusCode}): {response.ReasonPhrase}");
}
}
This code is being used in a Console application running in the context of my domain account. This domain account has been setup in NPrinting as a user with the 'Administrator' security role. I've also ensured that the user has been linked with my domain account.
var service = new NPrintingService(ConfigurationManager.AppSettings["ServiceUrl"]);
var authenticate = await service.Authenticate();
var result = await service.CreateOnDemandRequest(); // Exception occurs here
I can confirm that the request is successfully authenticated. I've also run this code with Fiddler active and confirmed that the output is the same -- Authentication is successful, but creating the On-Demand request fails.
Has anyone been able to successfully use this API? If so, how?
