Reg: CSRF Token Validation Failed when trying to approve the Invoices

Masayuki Sekihara - SCN Member of the Month December 2014

We are using Fiori Approval application for Invoices and other applications.

When trying to approve any request, I see there are 2 calls happening

Call 1: which is not getting CSRF Token

Call 2: getting CSRF Token.

Within Ajax.js line 10 where, fireHttpPost call is happening it is checking for h.onreadystatechange function and within the function calling fetchCsrfToken function which is getting the token.

So in the flow based on the code, we will get 403 Forbidden error and then get the CSRF token when the h.readystate is 4

Please let me know if this is the standard behavior when approving using Fiori.

Thanks,

Pramod