uber-archive / canduit Goto Github PK

// Get phabricator token:
// https://<your-phabricator.url>/settings/user/<your-user.name>/page/apitokens/
var phabricatorUrl = 'https://<your-phabricator.url>/'
var token = "token from https://<your-phabricator.url>/settings/user/<your-user.name>/page/apitokens/";
var data=`api.token=${token}`;

var xhr = new XMLHttpRequest();
xhr.withCredentials = true;

xhr.addEventListener("readystatechange", function () {
  if (this.readyState === 4) {
    console.log(this.responseText);
  }
});

xhr.open("POST", `${phabricatorUrl}/api/maniphest.search`);
xhr.setRequestHeader("content-type", "application/x-www-form-urlencoded");
xhr.setRequestHeader("cache-control", "no-cache");

xhr.send(data);
/* Here is the error in the logs.
{"result":null,"error_code":"ERR-CONDUIT-CORE","error_info":"You are trying to save some data to Phabricator, but the request your browser made included an incorrect token. Reload the page and try again. You may need to clear your cookies.\nThis was a Web request.\nThis request had no CSRF token."}
*/

// Get phabricator token and csrf:
// Get your phabricator csrf token  from  'http://your.phabricator.url/login/refresh/'
// Copy paste the token in the request

var baseUrl = 'https://<your-phabricator.url>'
var token = "token form https://<your-phabricator.url>/settings/user/<your-user.name>/page/apitokens/";
var data = `api.token=${token}`;
var csrfToken = "token from http://<your.phabricator.url/>login/refresh/'"
var xhr = new XMLHttpRequest();
xhr.withCredentials = true;

xhr.addEventListener("readystatechange", function () {
  if (this.readyState === 4) {
    console.log(this.responseText);
  }
});

xhr.open("POST", `${baseUrl}/api/maniphest.search`);
xhr.setRequestHeader("content-type", "application/x-www-form-urlencoded");
xhr.setRequestHeader("cache-control", "no-cache");
/*X-Phabricator-Csrf is now set*/
xhr.setRequestHeader('X-Phabricator-Csrf', csrfToken);

xhr.send(data);
// You should see a list of maniphest tasks that match the search criteria