fortiosapi icon indicating copy to clipboard operation
fortiosapi copied to clipboard

fortiosapi: update_cookie issue since upgrade from 7.0.12 to 7.2.6

Open avlankveld opened this issue 1 year ago • 1 comments

Since the fortigate upgrade from 7.0.12 to 7.2.6 we noticed a problem with fortiosapi.

When creating an address we now get a 403 error. we use https port 10443

the name of the Cookie is not 'ccsrftoken' but 'ccsrftoken_10443'

the result of this is that the session header does not have an X-CSRFTOKEN.

As a workaround, I adjusted the update_cookie routine:

if cookie.name == 'ccsrftoken': changed to if cookie.name == 'ccsrftoken' or cookie.name == 'ccsrftoken_10443':

now it works for me....

avlankveld avatar Dec 31 '23 18:12 avlankveld

For 7.0.x the issue starts with 7.0.14 (upgraded from 7.0.12; maybe even starts with 7.0.13 already). Note that the token name is different there, being csrftoken_, so we're checking it like: if cookie.name == 'ccsrftoken' or cookie.name.startswith('ccsrftoken_'):

cldmkr avatar Feb 15 '24 16:02 cldmkr