fortiosapi
fortiosapi copied to clipboard
fortiosapi: update_cookie issue since upgrade from 7.0.12 to 7.2.6
Since the fortigate upgrade from 7.0.12 to 7.2.6 we noticed a problem with fortiosapi.
When creating an address we now get a 403 error. we use https port 10443
the name of the Cookie is not 'ccsrftoken' but 'ccsrftoken_10443'
the result of this is that the session header does not have an X-CSRFTOKEN.
As a workaround, I adjusted the update_cookie routine:
if cookie.name == 'ccsrftoken': changed to if cookie.name == 'ccsrftoken' or cookie.name == 'ccsrftoken_10443':
now it works for me....
For 7.0.x the issue starts with 7.0.14 (upgraded from 7.0.12; maybe even starts with 7.0.13 already).
Note that the token name is different there, being csrftoken_if cookie.name == 'ccsrftoken' or cookie.name.startswith('ccsrftoken_'):