Re: [dspace-tech] Re: API dspace

2024-05-15 Thread Antti Laurila
Hi! You could try adding the bearer_token to the POST api-call: Authorization: . The bearer-token can be found from the headers of the login -call result. To include the headers to the result of the login-api-call (this is not the default-setting), include the following curl-parameter to the

Re: [dspace-tech] Re: API dspace

2024-05-06 Thread Χρήστος Κατσάνης
Hey i was added to headers the cookie but 403? Στις Δευ 6 Μαΐ 2024, 17:43 ο χρήστης DSpace Technical Support < dspace-tech@googlegroups.com> έγραψε: > Hi, > > It's difficult to help with custom code, especially since I don't know > PHP. But, at a glance, it looks like you are not sending a CSRF

[dspace-tech] Re: API dspace

2024-05-06 Thread DSpace Technical Support
Hi, It's difficult to help with custom code, especially since I don't know PHP. But, at a glance, it looks like you are not sending a CSRF token with the login request. You MUST send a CSRF token on every POST/PUT/PATCH/DELETE requests, and login is done via a POST. See the CSRF token docs