Reputation: 111
I can't connect the Developer Studio to the BPS. I have the latest version of studio and the BPS version is the latest ( 3.6.0 ). When I try to connect the server the Developer Studio check of the existance is positive, but when I try to check the password the result is 403 error forbidden. The shell says WARN {org.owasp.csrfguard.log.JavaLogger} - potential cross-site request forgery (CSRF) attack thwarted (user:, ip:127.0.0.1, method:POST, uri://services/AuthenticationAdmin, error:required token is missing from the request)
I can access through the browser
Upvotes: 0
Views: 182
Reputation: 368
You can try this method.
Locate to Owasp.CsrfGuard.Carbon.properties
file in {BPS_HOME}/repository/conf/security and add the line below
org.owasp.csrfguard.unprotected.Services=%servletContext%/services/*
Restart the BPS server and try to connect again
Hope this helps
Upvotes: 1