CSRF validation failed in Drupal

Question

I'm using a webservice in Drupal 7. If I try to use Poster I get 'CSRF validation failed'. Before, I was connected with an administrator account. I use the Firefox add-in Poster. How can I fix this problem?

Accepted Answer

You need to pass along the CSRF token in the header of the service request.

To retrieve the token, navigate to:

http://www.example.com/?q=services/session/token

Copy the token to your clipboard.

Then in FireFox poster, using the "Headers" tab, add this name and value:

- Name: X-CSRF-Token

- Value: [paste-the-token-value-here]

Now when you make requests, the token will be passed along correctly with FireFox Poster.

Here's a detailed blog post outlining this topic:

http://tylerfrankenstein.com/code/drupal-services-csrf-token-firefox-poster

CSRF validation failed in Drupal

Solution

Problem