Release Automation SOAP API invocation via Scripts

Products

• CA Release Automation - Release Operations Center (Nolio)
• CA Release Automation - DataManagement Server (Nolio)

Issue/Introduction

SOAP API integration results in error "Expected CSRF token not found"

Environment

Version : 4.7.1.448 or higherScripts: VB or any scripting language making call to Release Automation API service

Cause

To enable and make product more robust Release Automation have addressed various security vulnerabilities. One of them is Cross-site request forgery (CSRF) which is implemented across all exposed interface of Release Automation. Due to this security check the scripts integrating making successive call in single session may result in error below

HTTP Status 403 - Expected CSRF token not found. Has your session expired? Access to the specified resource has been forbidden.

Resolution

1. The script need a modification to avoid CSRF violation

Additional Information

In case you need additional help please contact CA support