You are viewing a plain text version of this content. The canonical link for it is here.
Posted to notifications@superset.apache.org by GitBox <gi...@apache.org> on 2021/08/01 20:18:05 UTC

[GitHub] [superset] EMCP opened a new issue #16003: [SIP-71] Proposal for clearer instructions in the Swagger API Docs how to set the CSRF token

EMCP opened a new issue #16003:
URL: https://github.com/apache/superset/issues/16003


   ### Motivation
   
   I've been trying to get started with a basic empty apache superset.. and add a single data source (Postgresql).  So far I accidentally started wiring it via `superset -set-database-uri` which I later learned will change my apache supersets backend... not start examining my data.. no problem I start switching to the REST api.. but then I get stuck on the create database step because of CSRF 
   
   ### Proposed Change
   
   On the Swagger API docs (and perhaps the part around `superset -set-database-uri` make it cleaer what we're doing with databases.. even just a simple prompt in the `superset --help` telling me to go examine the REST api can clue me in .. in places where I should not be trying to use the CLI
   
   ### New or Changed Public Interfaces
   
   In the Swagger Docs I just need to know where or how to set the CSRF token... I am almost there but.. just not sure where FLASK is expecting to find the CSRF token.. so I just get constant 400 errors when trying to create my first DB
   
   ```
   Traceback (most recent call last):
     File "/scratch.py", line 96, in <module>
       response = create_db_connection(jwt_token=bearer_tokens['access_token'], db_ip=db_host, db_port=db_port, username=db_user, password=db_password, db_name=db_name)
     File "/scratch.py", line 43, in create_db_connection
       response.raise_for_status()
     File "/home/emcp/anaconda3/envs/stonks-consume-ibjts/lib/python3.9/site-packages/requests/models.py", line 943, in raise_for_status
       raise HTTPError(http_error_msg, response=self)
   requests.exceptions.HTTPError: 400 Client Error: BAD REQUEST for url: http://someip:8088/api/v1/database/
   ```
   
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: notifications-unsubscribe@superset.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org



---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscribe@superset.apache.org
For additional commands, e-mail: notifications-help@superset.apache.org


[GitHub] [superset] EMCP commented on issue #16003: clearer instructions in the Swagger API Docs how to set the CSRF token

Posted by GitBox <gi...@apache.org>.
EMCP commented on issue #16003:
URL: https://github.com/apache/superset/issues/16003#issuecomment-890598860


   Closing issue is okay from my side.. 
   
   I now have a working JSON to pass which seems to get a good test connection on POSTGresQL
   
   ```
       data_out = {
         "allow_csv_upload": True,
         "allow_ctas": False,
         "allow_cvas": False,
         "allow_dml": False,
         "allow_multi_schema_metadata_fetch": False,
         "allow_run_async": False,
         "cache_timeout": 0,
         "database_name": db_name,
         "expose_in_sqllab": True,
         "impersonate_user": False,
         "sqlalchemy_uri": sqlalchemy_url
       }
   
   ```


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: notifications-unsubscribe@superset.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org



---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscribe@superset.apache.org
For additional commands, e-mail: notifications-help@superset.apache.org


[GitHub] [superset] EMCP edited a comment on issue #16003: clearer instructions in the Swagger API Docs how to set the CSRF token

Posted by GitBox <gi...@apache.org>.
EMCP edited a comment on issue #16003:
URL: https://github.com/apache/superset/issues/16003#issuecomment-890596106


   After I created the connection seems to be unhappy.. I am diffing it with a connection I made manually.. seems I need to make sure to add certain things like
   
   ```
   {
       "metadata_params": {},
       "engine_params": {},
       "metadata_cache_timeout": {},
       "schemas_allowed_for_csv_upload": []
   }
   
   ```
   
   in the extras section
   
   I probably need to also handle the response object better.. getting response after creation as 
   
   ```
   scratch.py
   Traceback (most recent call last):
     File "/scratch.py", line 73, in <module>
       create_response = create_db_connection(session, bearer_token=json.loads(response.text)['access_token'], csrf_token=json.loads(csrf_response.text)['result'], db_ip=db_host, db_port=db_port, db_user=db_user, db_pass=db_password, db_name=db_name)
     File "/scratch.py", line 36, in create_db_connection
       response.raise_for_status()
     File "/home/emcp/anaconda3/envs/lib/python3.9/site-packages/requests/models.py", line 943, in raise_for_status
       raise HTTPError(http_error_msg, response=self)
   requests.exceptions.HTTPError: 422 Client Error: UNPROCESSABLE ENTITY for url: http://SOMEIP:8088/api/v1/database/
   
   Process finished with exit code 1
   
   ```
   
   Seems even when I go into the GUI to test the connection it's not happy... but the same connection made via the GUI gets an OKAY ..  WIll keep trying to match the two as best I can via REST 
   
   getting a 
   
   ```
   ERROR: (psycopg2.OperationalError) FATAL:  pg_hba.conf rejects connection for host "MYSUPERSETIP", user "MYADMINUSER", database "DB_TO_TEST_CONNECTION", SSL on
   FATAL:  pg_hba.conf rejects connection for host "MYSUPERSETIP", user "MYADMINUSER", database "DB_TO_TEST_CONNECTION", SSL off
   
   (Background on this error at: http://sqlalche.me/e/13/e3q8)
   ```
   
   when I go to test any connection I made via REST .. and now even my original GUI made connection is doing this.. guessing I need to just make sure everything is valid again but.. could it be the GUI is passing in the password wrong or ..?


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: notifications-unsubscribe@superset.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org



---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscribe@superset.apache.org
For additional commands, e-mail: notifications-help@superset.apache.org


[GitHub] [superset] EMCP commented on issue #16003: clearer instructions in the Swagger API Docs how to set the CSRF token

Posted by GitBox <gi...@apache.org>.
EMCP commented on issue #16003:
URL: https://github.com/apache/superset/issues/16003#issuecomment-890594596


   just want to confirm, I got it to work finally after a bit of your help.  thank you @nytai !
   
   For others
   
   ```
       sqlalchemy_url = "postgresql://" + db_user + ":" + db_pass + "@" + db_ip + ":" + str(db_port)+"/" + db_name
   
       data_out = {
         "allow_csv_upload": True,
         "allow_ctas": True,
         "allow_cvas": True,
         "allow_dml": True,
         "allow_multi_schema_metadata_fetch": True,
         "allow_run_async": True,
         "cache_timeout": 0,
         "database_name": db_name,
         "expose_in_sqllab": True,
         "impersonate_user": True,
         "sqlalchemy_uri": sqlalchemy_url
       }
   
       head = {
           "Authorization": "Bearer " + bearer_token,
           "X-CSRFToken": csrf_token
       }
   
       response = session.post(url=url, headers=head, json=data_out)
       response.raise_for_status()
   
       return response
   ```


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: notifications-unsubscribe@superset.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org



---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscribe@superset.apache.org
For additional commands, e-mail: notifications-help@superset.apache.org


[GitHub] [superset] EMCP commented on issue #16003: clearer instructions in the Swagger API Docs how to set the CSRF token

Posted by GitBox <gi...@apache.org>.
EMCP commented on issue #16003:
URL: https://github.com/apache/superset/issues/16003#issuecomment-890596106


   After I created the connection seems to be unhappy.. I am diffing it with a connection I made manually.. seems I need to make sure to add certain things like
   
   ```
   {
       "metadata_params": {},
       "engine_params": {},
       "metadata_cache_timeout": {},
       "schemas_allowed_for_csv_upload": []
   }
   
   ```
   
   in the extras section


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: notifications-unsubscribe@superset.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org



---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscribe@superset.apache.org
For additional commands, e-mail: notifications-help@superset.apache.org


[GitHub] [superset] nytai closed issue #16003: clearer instructions in the Swagger API Docs how to set the CSRF token

Posted by GitBox <gi...@apache.org>.
nytai closed issue #16003:
URL: https://github.com/apache/superset/issues/16003


   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: notifications-unsubscribe@superset.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org



---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscribe@superset.apache.org
For additional commands, e-mail: notifications-help@superset.apache.org


[GitHub] [superset] EMCP commented on issue #16003: [SIP-71] Proposal for clearer instructions in the Swagger API Docs how to set the CSRF token

Posted by GitBox <gi...@apache.org>.
EMCP commented on issue #16003:
URL: https://github.com/apache/superset/issues/16003#issuecomment-890580371


   response.text reads
   
   ```
   '{"errors": [{"message": "400 Bad Request: The CSRF token is missing.", "error_type": "GENERIC_BACKEND_ERROR", "level": "error", "extra": {"issue_codes": [{"code": 1011, "message": "Issue 1011 - Superset encountered an unexpected error."}]}}]}'
   ```


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: notifications-unsubscribe@superset.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org



---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscribe@superset.apache.org
For additional commands, e-mail: notifications-help@superset.apache.org


[GitHub] [superset] EMCP edited a comment on issue #16003: clearer instructions in the Swagger API Docs how to set the CSRF token

Posted by GitBox <gi...@apache.org>.
EMCP edited a comment on issue #16003:
URL: https://github.com/apache/superset/issues/16003#issuecomment-890598860


   Closing issue is okay from my side.. 
   
   I now have a working JSON to pass which seems to get a good test connection on POSTGresQL
   
   ```
       data_out = {
         "allow_csv_upload": True,
         "allow_ctas": False,
         "allow_cvas": False,
         "allow_dml": False,
         "allow_multi_schema_metadata_fetch": False,
         "allow_run_async": False,
         "cache_timeout": 0,
         "database_name": db_name,
         "expose_in_sqllab": True,
         "impersonate_user": False,
         "sqlalchemy_uri": sqlalchemy_url
       }
   
   ```
   
   i got a 400 trying to nest another JSON object for default parameters.. and when I tried to pass a blank one it gave a 500
   
   
   ```
       params_str = json.dumps({
           "metadata_params": {},
           "engine_params": {},
           "metadata_cache_timeout": {},
           "schemas_allowed_for_csv_upload": []
           })
   
       data_out = {
         "allow_csv_upload": True,
         "allow_ctas": False,
         "allow_cvas": False,
         "allow_dml": False,
         "allow_multi_schema_metadata_fetch": False,
         "allow_run_async": False,
         "cache_timeout": 0,
         "database_name": db_name,
         "expose_in_sqllab": True,
         "impersonate_user": False,
         "sqlalchemy_uri": sqlalchemy_url,
         "parameters": params_str
       }
   ```
   
   
   ```
   Connected to pydev debugger (build 212.4746.96)
   Traceback (most recent call last):
     File "/home/emcp/Tools/pycharm-community-2021.1.1/plugins/python-ce/helpers/pydev/pydevd.py", line 1483, in _exec
       pydev_imports.execfile(file, globals, locals)  # execute the script
     File "/home/emcp/Tools/pycharm-community-2021.1.1/plugins/python-ce/helpers/pydev/_pydev_imps/_pydev_execfile.py", line 18, in execfile
       exec(compile(contents+"\n", file, 'exec'), glob, loc)
     File "/scratch.py", line 81, in <module>
       create_response = create_db_connection(session, bearer_token=json.loads(response.text)['access_token'], csrf_token=json.loads(csrf_response.text)['result'], db_ip=db_host, db_port=db_port, db_user=db_user, db_pass=db_password, db_name=db_name)
     File "/scratch.py", line 44, in create_db_connection
       response.raise_for_status()
     File "/home/emcp/anaconda3/envs//lib/python3.9/site-packages/requests/models.py", line 943, in raise_for_status
       raise HTTPError(http_error_msg, response=self)
   requests.exceptions.HTTPError: 500 Server Error: INTERNAL SERVER ERROR for url: http://SOMEIP:8088/api/v1/database/
   python-BaseException
   ```
   
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: notifications-unsubscribe@superset.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org



---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscribe@superset.apache.org
For additional commands, e-mail: notifications-help@superset.apache.org


[GitHub] [superset] EMCP edited a comment on issue #16003: clearer instructions in the Swagger API Docs how to set the CSRF token

Posted by GitBox <gi...@apache.org>.
EMCP edited a comment on issue #16003:
URL: https://github.com/apache/superset/issues/16003#issuecomment-890596106


   After I created the connection seems to be unhappy.. I am diffing it with a connection I made manually.. seems I need to make sure to add certain things like
   
   ```
   {
       "metadata_params": {},
       "engine_params": {},
       "metadata_cache_timeout": {},
       "schemas_allowed_for_csv_upload": []
   }
   
   ```
   
   in the extras section
   
   I probably need to also handle the response object better.. getting response after creation as 
   
   ```
   scratch.py
   Traceback (most recent call last):
     File "/scratch.py", line 73, in <module>
       create_response = create_db_connection(session, bearer_token=json.loads(response.text)['access_token'], csrf_token=json.loads(csrf_response.text)['result'], db_ip=db_host, db_port=db_port, db_user=db_user, db_pass=db_password, db_name=db_name)
     File "/scratch.py", line 36, in create_db_connection
       response.raise_for_status()
     File "/home/emcp/anaconda3/envs/lib/python3.9/site-packages/requests/models.py", line 943, in raise_for_status
       raise HTTPError(http_error_msg, response=self)
   requests.exceptions.HTTPError: 422 Client Error: UNPROCESSABLE ENTITY for url: http://SOMEIP:8088/api/v1/database/
   
   Process finished with exit code 1
   
   ```
   
   Seems even when I go into the GUI to test the connection it's not happy... but the same connection made via the GUI gets an OKAY .. 


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: notifications-unsubscribe@superset.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org



---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscribe@superset.apache.org
For additional commands, e-mail: notifications-help@superset.apache.org


[GitHub] [superset] EMCP edited a comment on issue #16003: clearer instructions in the Swagger API Docs how to set the CSRF token

Posted by GitBox <gi...@apache.org>.
EMCP edited a comment on issue #16003:
URL: https://github.com/apache/superset/issues/16003#issuecomment-890596106


   After I created the connection seems to be unhappy.. I am diffing it with a connection I made manually.. seems I need to make sure to add certain things like
   
   ```
   {
       "metadata_params": {},
       "engine_params": {},
       "metadata_cache_timeout": {},
       "schemas_allowed_for_csv_upload": []
   }
   
   ```
   
   in the extras section
   
   I probably need to also handle the response object better.. getting response after creation as 
   
   ```
   scratch.py
   Traceback (most recent call last):
     File "/scratch.py", line 73, in <module>
       create_response = create_db_connection(session, bearer_token=json.loads(response.text)['access_token'], csrf_token=json.loads(csrf_response.text)['result'], db_ip=db_host, db_port=db_port, db_user=db_user, db_pass=db_password, db_name=db_name)
     File "/scratch.py", line 36, in create_db_connection
       response.raise_for_status()
     File "/home/emcp/anaconda3/envs/lib/python3.9/site-packages/requests/models.py", line 943, in raise_for_status
       raise HTTPError(http_error_msg, response=self)
   requests.exceptions.HTTPError: 422 Client Error: UNPROCESSABLE ENTITY for url: http://SOMEIP:8088/api/v1/database/
   
   Process finished with exit code 1
   
   ```
   
   Seems even when I go into the GUI to test the connection it's not happy... but the same connection made via the GUI gets an OKAY ..  WIll keep trying to match the two as best I can via REST 


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: notifications-unsubscribe@superset.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org



---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscribe@superset.apache.org
For additional commands, e-mail: notifications-help@superset.apache.org


[GitHub] [superset] nytai commented on issue #16003: clearer instructions in the Swagger API Docs how to set the CSRF token

Posted by GitBox <gi...@apache.org>.
nytai commented on issue #16003:
URL: https://github.com/apache/superset/issues/16003#issuecomment-893143378


   closing this for now as it seems the core issue is resolved


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: notifications-unsubscribe@superset.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org



---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscribe@superset.apache.org
For additional commands, e-mail: notifications-help@superset.apache.org


[GitHub] [superset] nytai commented on issue #16003: clearer instructions in the Swagger API Docs how to set the CSRF token

Posted by GitBox <gi...@apache.org>.
nytai commented on issue #16003:
URL: https://github.com/apache/superset/issues/16003#issuecomment-890588401


   I opened a PR to update the api docs: https://github.com/apache/superset/pull/16005
   
   You can configure superset to disable CSRF protection: https://superset.apache.org/docs/installation/configuring-superset#configuration
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: notifications-unsubscribe@superset.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org



---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscribe@superset.apache.org
For additional commands, e-mail: notifications-help@superset.apache.org


[GitHub] [superset] nytai commented on issue #16003: [SIP-71] Proposal for clearer instructions in the Swagger API Docs how to set the CSRF token

Posted by GitBox <gi...@apache.org>.
nytai commented on issue #16003:
URL: https://github.com/apache/superset/issues/16003#issuecomment-890586104


   You need to include the header `X-CSRFToken` with the token. Yes public docs have not been updated in a while. 


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: notifications-unsubscribe@superset.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org



---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscribe@superset.apache.org
For additional commands, e-mail: notifications-help@superset.apache.org


[GitHub] [superset] nytai commented on issue #16003: clearer instructions in the Swagger API Docs how to set the CSRF token

Posted by GitBox <gi...@apache.org>.
nytai commented on issue #16003:
URL: https://github.com/apache/superset/issues/16003#issuecomment-893143378


   closing this for now as it seems the core issue is resolved


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: notifications-unsubscribe@superset.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org



---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscribe@superset.apache.org
For additional commands, e-mail: notifications-help@superset.apache.org


[GitHub] [superset] EMCP edited a comment on issue #16003: clearer instructions in the Swagger API Docs how to set the CSRF token

Posted by GitBox <gi...@apache.org>.
EMCP edited a comment on issue #16003:
URL: https://github.com/apache/superset/issues/16003#issuecomment-890596106


   After I created the connection seems to be unhappy.. I am diffing it with a connection I made manually.. seems I need to make sure to add certain things like
   
   ```
   {
       "metadata_params": {},
       "engine_params": {},
       "metadata_cache_timeout": {},
       "schemas_allowed_for_csv_upload": []
   }
   
   ```
   
   in the extras section
   
   I probably need to also handle the response object better.. getting response after creation as 
   
   ```
   scratch.py
   Traceback (most recent call last):
     File "/scratch.py", line 73, in <module>
       create_response = create_db_connection(session, bearer_token=json.loads(response.text)['access_token'], csrf_token=json.loads(csrf_response.text)['result'], db_ip=db_host, db_port=db_port, db_user=db_user, db_pass=db_password, db_name=db_name)
     File "/scratch.py", line 36, in create_db_connection
       response.raise_for_status()
     File "/home/emcp/anaconda3/envs/lib/python3.9/site-packages/requests/models.py", line 943, in raise_for_status
       raise HTTPError(http_error_msg, response=self)
   requests.exceptions.HTTPError: 422 Client Error: UNPROCESSABLE ENTITY for url: http://SOMEIP:8088/api/v1/database/
   
   Process finished with exit code 1
   
   ```


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: notifications-unsubscribe@superset.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org



---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscribe@superset.apache.org
For additional commands, e-mail: notifications-help@superset.apache.org


[GitHub] [superset] EMCP commented on issue #16003: clearer instructions in the Swagger API Docs how to set the CSRF token

Posted by GitBox <gi...@apache.org>.
EMCP commented on issue #16003:
URL: https://github.com/apache/superset/issues/16003#issuecomment-890593316


   That sounds great,
   
   I'm trying to hit the ground running with as secure an installation as possible, but I understand I could disable if needed.
   
   I posted my sequence of events and even tried that `X-CSRFToken` in the header.. but will try again 
   
   full code at https://stackoverflow.com/questions/68614350/cannot-post-a-new-db-to-apache-superset-400-error-with-csrf


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: notifications-unsubscribe@superset.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org



---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscribe@superset.apache.org
For additional commands, e-mail: notifications-help@superset.apache.org


[GitHub] [superset] EMCP commented on issue #16003: [SIP-71] Proposal for clearer instructions in the Swagger API Docs how to set the CSRF token

Posted by GitBox <gi...@apache.org>.
EMCP commented on issue #16003:
URL: https://github.com/apache/superset/issues/16003#issuecomment-890584976


   additionally noticed the public docs do not list the `api/v1/security/csrf_token` .. only when i go to the live swagger docs hosted on my instance


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: notifications-unsubscribe@superset.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org



---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscribe@superset.apache.org
For additional commands, e-mail: notifications-help@superset.apache.org


[GitHub] [superset] nytai closed issue #16003: clearer instructions in the Swagger API Docs how to set the CSRF token

Posted by GitBox <gi...@apache.org>.
nytai closed issue #16003:
URL: https://github.com/apache/superset/issues/16003


   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: notifications-unsubscribe@superset.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org



---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscribe@superset.apache.org
For additional commands, e-mail: notifications-help@superset.apache.org