# Can't send POST request return \["BAD CSRF"\]", status: 403

**URL:** https://meta.discourse.org/t/cant-send-post-request-return-bad-csrf-status-403/69049
**Category:** Development
**Created:** [2017年八月30日 10:50 UTC](https://meta.discourse.org/t/cant-send-post-request-return-bad-csrf-status-403/69049 "2017-08-30T10:50:18Z")
**Posts on this page:** 1
**Page:** 1

<div class="post-metadata">

### Author: ![Andrey\_Veryovkin](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/andrey_veryovkin/32/76487_2.png) [@Andrey\_Veryovkin](https://meta.discourse.org/u/Andrey_Veryovkin)
#### Post date: [2017年八月30日 10:50 UTC](https://meta.discourse.org/t/cant-send-post-request-return-bad-csrf-status-403/69049/1 "2017-08-30T10:50:18Z")

</div>

Make POST request to create new post in topic

```
sendPostMessage(message: Message, user: User): Observable<Message> {
        let headers = new Headers({
          'Content-Type': 'multipart/form-data',
          'Access-Control-Allow-Credentials': 'true',
          'Access-Control-Allow-Origin': '*',
          'cache-control': 'no-cache',
          'Access-Control-Allow-Methods': 'POST, OPTIONS',
        });
        let messageBody = {
          topic_id: message.topic_id,
          raw: message.raw,
          api_key: user.api_key,
          api_username: user.api_username
        }
        let options = new RequestOptions({ headers });
        return this.http.post('http://dogwelder.pocketgems.com/posts' , messageBody, options)
            .map(this.extractData)
            .catch(this.handleErrorObservable);

    }

```