Content Management and Capture

 View Only
  • 1.  OpenShift, GraphQL: XSRF token is not valid

    Posted Mon February 26, 2024 04:58 AM
    Edited by Ingo Zitzmann Mon February 26, 2024 11:56 AM

    Hello,

    I am trying to use GraphQL on a FileNet 5.5.12 stack deployed on OpenShift CRC. ICN, ACCE works, however when attempting to access GraphQL via https://graphql-fncm.apps-crc.testing/content-services-graphql, I get the following error:

    Error 500: com.ibm.ecm.content.graphql.exceptions.ContentServicesException: Unauthorized access: XSRFValidator.validateXSRF: XSRF token is not valid

    Looks like some cross site issue?! Anyone have an idea where to start looking? 

    Thanks,
    Ingo. 

    P.S.: Certificate states that is for the server icp4a-fncm-svc. Maybe needs a SAN or GraphQL needs to be made more lenient

    Found this but don't know how to put this into the CRD :

    -Decm.content.graphql.disable.xsrf.validation.for.ping=TRUE



    ------------------------------
    Ingo Zitzmann
    ------------------------------



  • 2.  RE: OpenShift, GraphQL: XSRF token is not valid

    Posted Mon February 26, 2024 12:38 PM

    Found the issue. When choosing to deploy GraphQL, this doesn't mean it will also get activated:

    https://www.ibm.com/docs/en/filenet-p8-platform/5.5.12?topic=graphql-enabling-graphiql

    ```yml
    spec: 
      ecm_configuration:
        graphql:
          graphql_production_setting:
            enable_graph_iql: true
    ```



    ------------------------------
    Ingo Zitzmann
    ------------------------------