# Getting \["BAD CSRF"\] when updating topic via API \[python\]

**URL:** https://meta.discourse.org/t/getting-bad-csrf-when-updating-topic-via-api-python/199857
**Category:** Development
**Tags:** rest-api
**Created:** [August 9, 2021, 7:25pm UTC](https://meta.discourse.org/t/getting-bad-csrf-when-updating-topic-via-api-python/199857 "2021-08-09T19:25:01Z")
**Posts on this page:** 1
**Showing post:** 2

<div class="post-metadata">

### Author: ![Falco](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/falco/32/179432_2.png) [@Falco](https://meta.discourse.org/u/Falco)
#### Post date: [August 9, 2021, 7:28pm UTC](https://meta.discourse.org/t/getting-bad-csrf-when-updating-topic-via-api-python/199857/2 "2021-08-09T19:28:16Z")

</div>

> [@pedroleaoc](#):
>
> `headers["Authorization"]`

Why are you nesting the headers under this `Authorization` dict key? That is not documented at [Discourse REST API Documentation](https://meta.discourse.org/t/discourse-api-documentation/22706) 🤔

---

_[View the full topic](https://meta.discourse.org/t/getting-bad-csrf-when-updating-topic-via-api-python/199857)._