Re: Re: Rest API v.2 developer credentials
Aldevinas Katkus
10-17-17
Thanks for the answer. One more question:
is there any CSRF protection implemented in the Rest API?
The CSRF (Cross Site Request Forgery) problem with OAuth is described here https://security.stackexchange.com/a/57886
It looks like the 'state' param is not sent back to the redirect_url. Quote
"The authorization code is issued and sent back to the client in your session along with the state parameter"
I was testing OAuth with this http://oauth2-client.thephpleague.com/usage/
Reply
Leave Comment
You can subscribe to notifications for this post by selecting the 'star' icon on the top right corner of the post.
Latest Posts
Logo on bottom left of Navigation window
Hi there, We have noticed that when we click the "Standard ERP by HansaWorld" logo on the bottom left hand side of the main navigation window that it takes us off to our default browser a...
11:37 14 Aug 2026
Re: mailboxes with email / conference module
Reino Botha
Hi Kevin, All users require a mailbox, including Global Users. The mailbox is also required to enable access to the Personal Desktop, so it cannot be avoided even if the Email and Conference mod...
10:45 14 Aug 2026