PowerScale OneFS API Reference

Authentication with CSRF protection

To protect OneFS APIs from Cross-Site Request Forgery (CSRF) attacks, the OneFS API enforces an additional anti-CSRF token header be passed by the client with each request to the API. The anti-CSRF token is obtained from the server on the initial API authentication request and, to pass authentication checks, must be included with all API requests along with the session token.