Do not input private or sensitive data. View Qlik Privacy & Cookie Policy.
Skip to main content

Announcements
Join us in Bucharest on Sept 18th for Qlik's AI Reality Tour! Register Now
cancel
Showing results for 
Search instead for 
Did you mean: 
cterenzi
Specialist
Specialist

csrf tokens and web files

Has anyone had any experience authenticating with a web page that uses csrf tokens?  I had a job break after a web site update, and the culprit seems to be these tokens.  I managed to parse the web page and extract the token value on the login page, but including that value with my POST request doesn't seem to be working.

Labels (2)
1 Solution

Accepted Solutions
cterenzi
Specialist
Specialist
Author

So I worked out what was missing. When downloading the page to extract the token, I needed to also store a cookie. Then when authenticating, I both read and saved that cookie. After authenticating, subsequent tFileFetch components worked by just reading the cookie. No need to reference the token.

View solution in original post

1 Reply
cterenzi
Specialist
Specialist
Author

So I worked out what was missing. When downloading the page to extract the token, I needed to also store a cookie. Then when authenticating, I both read and saved that cookie. After authenticating, subsequent tFileFetch components worked by just reading the cookie. No need to reference the token.