通过 Webhook 在主题内提交回复

[B-iggy]

仅作信息说明，失败并非由于数据字段，而是因为 CSRF 验证错误。
详见：

Improve BAD CSRF error message when making API calls with content-type application/json

API requests with the Content-Type as “application/json” often receive an unhelpful message like “BAD CSRF”, so we should improve the error messaging so that it provides more details as to why they are receiving this error message.

@blake 这是否意味着我需要在 Header 中设置 api_username 和 api_key？

我目前失败的进展：