Hello, It sounds like the first problem is lack of a CSRF token, yes - it is mandatory to send a CSRF token with every non-GET request, see the REST API documentation for how to obtain and use the tokens: https://github.com/DSpace/RestContract/blob/main/csrf-tokens.md You'll also need to authenticate before admin-level activity, and send the authorization header along with CSRF token for those subsequent requests. See the REST API documentation for authentication: : https://github.com/DSpace/RestContract/blob/main/authentication.md
Generally when you're working with the API and unsure of the requests, I'd also recommend testing your requests via the HAL browser <https://wiki.lyrasis.org/display/DSDOC9x/REST+API#RESTAPI-Overview> at the root of the server. As a side note, if you have future technical questions like this - they will be better suited to post on the Tech Support group <https://groups.google.com/g/dspace-tech> rather than this one. Thanks! Hope this can help you move forward. -Lia On Wednesday, March 18, 2026 at 9:08:24 AM UTC-4 [email protected] wrote: > Hi team, > > I have deployed dspace backend 7.6.1, I have requirement to upload > multiple items on particular collections. I got SAF can help on this and in > module/additions I have added RabbitMq related code. > > sharing those details, whatever data FeedIngestionService(Node service) > has send through rabbitmq, it should be consumed by dspace backend code > (module/additions), here I have custom code for rabbitmq consume part, this > code will prepare SAF data,let's says this is my root folder on s3 i.e. > Feeds folder, inside this all items with metadata.json and with assets > (image/video) will be present. I will iterate all folder and read only > metadata.json to prepare dublin_core, license and metadata_dspace from > metadata.json file and after preparation these files I will upload at same > location of that item for which currently I am processing. > > Let say Feeds folder contains two items item001, item002, Dspace will get > item001, item002 and will prepare dublin_core, license and metadata_dspace > from metadata.json file and will upload at item001, item002 respectively. > Once everything done, I have to zip item001, item002 into zipped file name > is : saf.zip and then dspace will use this saf.zip file through it's s3 > path during import. > > assets may large in size but those were not available on dspace, from > somehwere we will get in s3 folder and when we will upload on dspace and it > will store in another s3 folder. > I am able to consume messages but facing issue related to csrf token, > before login not sure why it is expecting csrf token. I need your help to > resolve my issues, if I have : > 1. to call /import will only this url needed or we need more api to call > before /import? > 2. to fix the order i.e. first */csrf -> /login -> /import *or something > else, if csrf is mandatory then how I can call it, since I am getting below > issues: > > 2026-03-18 17:55:17,996 WARN unknown 99803b2b-14cd-42d0-998c-39ad2046c088 > org.dspace.app.rest.exception.DSpaceApiExceptionControllerAdvice @ An > exception has occurred (status:404 exception: The repository type > csrf.token was not found at: > org.dspace.app.rest.utils.Utils.getResourceRepositoryByCategoryAndModel(Utils.java:288)) > 2026-03-18 17:55:18,118 ERROR unknown unknown > org.app.dspace.rabbitmq.DspaceRestScriptsClient @ [HTTP] GET > http://localhost:8080/server/api/csrf/tokens -> 404: > {"timestamp":"2026-03-18T12:25:18.017+00:00","status":404,"error":"Not > Found","message":"An exception has > occurred","path":"/server/api/csrf/tokens"} > 2026-03-18 17:55:18,128 INFO unknown 91c351c1-3766-4561-8d53-779c47d35cba > org.dspace.app.rest.utils.DSpaceAPIRequestLoggingFilter @ Before request > [GET /server/] originated from unknown > > Please help me on this. > > On Tuesday, February 3, 2026 at 3:09:12 PM UTC+5:30 Manish Kumar wrote: > >> Thanks for your reply, it's based on administrative tool, I am >> expecting any rest api's is doing the same thing to move from one to >> another collections. >> >> On Tuesday, February 3, 2026 at 2:22:03 PM UTC+5:30 Andrew K wrote: >> >>> See >>> https://wiki.lyrasis.org/display/DSDOC9x/Managing+Community+Hierarchy >>> >>> вівторок, 3 лютого 2026 р. о 08:26:33 UTC+2 Manish Kumar пише: >>> >>>> Hi all, >>>> >>>> We have deployed dspace 7.6.1, it's running fine, we have requirements, >>>> 1. We want to move all or only selected items from one collections to >>>> another collections, it should be complete move not copying from one to >>>> another collections. >>>> 2. We want to delete single or more selected items from same or others >>>> collections. >>>> >>>> We have our UI from there we manage to upload and delete assets into >>>> dspace through rest api. My app is showing list of collections from there >>>> I >>>> want to perform above activities. >>>> >>>> Does dspace provides this feature?, if not how we can implement it?. >>>> >>> -- All messages to this mailing list should adhere to the Code of Conduct: https://lyrasis.org/code-of-conduct/ --- You received this message because you are subscribed to the Google Groups "DSpace Community" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion visit https://groups.google.com/d/msgid/dspace-community/4e2189b6-5c13-4214-8731-0ca80095d2b4n%40googlegroups.com.
