Open
Description
Description
This is a security setting. When the /config call returns "csrf":true, the FE needs to make an additional call before each POST message. In the screenshot below, you can see on the new UI, it tries to make the POST message directly and gets a 403
On the legacy BI UI, the FE makes the call to /config/fetchCsrf and gets back a header X-Csrf-Token: <random ID".
This X-Csrf-Token must then be used for all subsequent POST requests
Existing
To test this locally, you must turn on the CSRF filter in Monolith project web.xml