Hey folks, can I use application/json as Content-Type when updating a post via the API? The docs say I can, but I am starting to think I cannot … I constantly get ["BAD CSRF"] and I have no clue what that means. If I need to use multipart/form-data do you folks have any pointers on how I build my …

[画像] pedroleaoc: When I edit the post via the GUI, there seems to be a PUT request to the topic’s URL (apart from the one that actually edits the post posts/post_id.json ) which I can’t reproduce with a limited API key, only the global. I don’t see why, however, I wouldn’t be able to edit the po…

[画像] pedroleaoc: header = CaseInsensitiveDict() header["Authorization"] = '{"api-key": "longapikey", "api-username": "myusername"}' You need to send the Api-Key and Api-Username as their own headers, not in the Authorization header. Something like this should work better: header = CaseInsens…

Thanks for your reply, David. That’s super weird, when I format the header the way you showed, I get: {"errors":["You are not permitted to view the requested resource. The API username or key is invalid."],"error_type":"invalid_access"} If I add the ["Authorization"], it works. That’s for a simp…

[画像] pedroleaoc: That’s for a simple GET request, I still can’t do the PUT . Likely something is malformed with your PUT request then if GET is working when you are doing it the wrong way with the Authorization header. It is working because you don’t have to be authorized at all the make the …

@pedroleaoc here is a little sample python script that demonstrates how to make authenticated requests and how to send the request data for put/post requests. # discourse-api-demo.py import requests from requests.structures import CaseInsensitiveDict # Basic GET request to a public url, no headers…

Doh, of course! Not all GETs require Authorization! That’s such a nice pointer, I will look into that. Thanks! Things that I already know by reverse engineering: api-key rather than api_key The PUT request requires "content-type": "application/x-www-form-urlencoded" The data is not in JSON (i…

[画像] pedroleaoc: The PUT request requires "content-type": "application/x-www-form-urlencoded" The data is not in JSON (it’s encoded, although I don’t seem to find the right encoding) Please see my post just above this. You can use the json=data instead of the data=data format in your request…

Awesome, I am now able to edit my post! Thanks for your help! There’s only one more issue, the key I am using is global. When I try with a key with write and read permissions only, I get: You are not permitted to view the requested resource. The API username or key is invalid.. When I edit the post…

No! I don’t even have that option! Will look into that, thanks for the help once again. [image]

投稿を編集する際の正しい`content-type`は何ですか？

開発

david (David Taylor) 2021 年 8 月 10 日午前 10:12 2

Api-Key と Api-Username は、Authorization ヘッダーの中に含めるのではなく、それぞれ独立したヘッダーとして送信する必要があります。以下のようにすると、よりうまくいくはずです。

header = CaseInsensitiveDict()
header["Api-Key"] = 'longapikey'
header["Api-Username"] = 'myusername'

これは、あなたの前のトピックと同じ問題のようです。

「いいね！」 2

トピック		返信	表示
Getting ["BAD CSRF"] when updating topic via API [python] Development rest-api	2	985	2021 年 8 月 9 日
"BAD CSRF" when executing PUT using API, curl, and PHP Development rest-api	6	2331	2024 年 5 月 4 日
Need Help updating profile info via API Development rest-api	7	385	2024 年 5 月 4 日
I'm getting bad CSRF error even after setting api keys and usernames to my headers General	2	875	2022 年 4 月 16 日
Creating a topic via the API using Node.js Development	12	2211	2020 年 3 月 30 日

投稿を編集する際の正しい`content-type`は何ですか？

関連トピック