equest failed with status code 403 XSRF check failed

I have sucessfully opened a jira connection, I can read project version and now I like to add a new issue:

this.jira.issues.createIssue({
      'fields': {
        'project': {
          'key': 'testjira'
        },
        'summary': 'a single ticket',
        'description': 'a simple text',
        'issuetype': {'id': 1}
      }
    })
                    .then((currentIssue) => {
                      return currentIssue;
                    })
                    .catch((err) => {
                      this.logError(err);
                      this.handleError(err);
                    });

This creates an error: An error occured Error: Request failed with status code 403 XSRF check failed

A google search mentions that this is a problem of the User-Agent. I have tried to change it:

this.jira = new Client({
      host: host,
      baseRequestConfig: {
        headers: {
          'Content-Type': 'application/json',
          'User-Agent': 'dumy agent'
        }},
      authentication: {
        basic: {
          username: username,
          password: password
        }
      }
    });

However, this creates another error: Refused to set unsafe header “User-Agent”

Why can I read Jira, but cannot write to it?

[otto2me]

Awesome, it works now. Thanks alot for the support 😃

[MrRefactoring]

@otto2me

I found a workaround to unblock you with this problem. You need to add this piece of code to your main.js file for run electron:

electron.session.defaultSession.webRequest.onBeforeSendHeaders((details, callback) => {
  details.requestHeaders['User-Agent'] = 'SuperDuperAgent';
  callback({ cancel: false, requestHeaders: details.requestHeaders });
});

I will also attach these changes specifically in your application, I hope I did not leave sensitive data there 😂

SyncTool-Small.zip

I still haven’t figured out how to make it work in the browser. X-Atlassian-Token: nocheck will not work because this header can only be accepted on certain endpoints, createIssue is not included in this list.