Hi Guys, Im getting an error when trying to use the API to update email. I have looked at the logs and can see the following: Started PUT “/discussion/users/davetest/preferences/email.json” for xx.xx.xx.xx at 2018-05-11 12:22:11 +0000 Processing by UsersEmailController#update as JSON Parameters…

[image] shahidmir: Can’t verify CSRF token authenticity. Can you verify the content-type that you are making the API request as? It needs to be "Content-Type: multipart/form-data;" If it is not that content type you may see the CSRF token error.

Hi, thanks for the reply. I actually had tried it both with ‘application/json’ and ‘application/x-www-form-urlencoded’ and neither worked. I have now tried it with what you suggested (via postman) and getting: “You are not permitted to view the requested resource. The API username or key is invali…

Here is an example of my postman request maybe you can spot any differences with what you are doing? I’m also using the “all users” key with an admin username. [image]

yes, its the same, im using the Postman API collection supplied by discourse. So using it as suggested. I will try again tonight and see if i get any different results. Will update when ive tried. Thanks for assisting, much appreciated. Do let me know if you have any other idea.

It most likely isn’t the oauth provider because the api keys will bypass it. Could you share the code for your API request?

in python: import json import requests import time my_token = '' url_base = '<>' update_email = url_base + "users/<my_username>/preferences/email.json" headers = { "Content-Type": "multipart/form-data", 'user-agent': 'my-app/0.0.1', 'Api-Key': my_token, 'Api-Username': '<my_usern…

Any more thoughts on this? My feeling is that someone with admin access rights should be able to set the e-mail of a person.

How so? I don’t think this is possible with the existing web UI, which defines the API. Therefore it can’t be done.

You mean that the UX/API should make it possible to set a user’s email address to whatever you want. (Not that you believe that it is currently possible.) You can initiate a change (via UX and I presume API) by editing their profile and entering the new address, but it won’t be changed until they c…

Cant update email via API - invalid_access error

Development

simonv3 (Simon) August 12, 2019, 1:34am 6

I’m experiencing this issue too and I’m wondering if it has anything to do with using an oauth provider for signing in and so this specific page is being blocked?

Topic		Replies	Views
[API] "Can't verify CSRF token authenticity" when attempting to update avatar for user Development rest-api	0	890	September 8, 2022
PUT /u/{username}.json does not change the email Bug rest-api	7	792	August 10, 2023
Changing a user's email address via api Development rest-api	7	2277	March 14, 2016
Problem updating user custom_fields created by a plugin Development	9	1385	April 18, 2019
Change user's email without verification Self-hosting rails-console	10	5403	August 22, 2021

Cant update email via API - invalid_access error

Related topics