Skip to content

Commit

Permalink
Merge pull request #52255 from Expensify/rodrigo-fix-csrf-token-native
Browse files Browse the repository at this point in the history
Fix API requests on the HybridApp
  • Loading branch information
rlinoz authored Nov 8, 2024
2 parents a569cbc + 9d763e5 commit ee89e3a
Showing 1 changed file with 5 additions and 0 deletions.
5 changes: 5 additions & 0 deletions src/libs/HttpUtils.ts
Original file line number Diff line number Diff line change
Expand Up @@ -58,6 +58,11 @@ function processHTTPRequest(url: string, method: RequestType = 'get', body: Form
signal: abortSignal,
method,
body,
// On Web fetch already defaults to 'omit' for credentials, but it seems that this is not the case for the ReactNative implementation
// so to avoid sending cookies with the request we set it to 'omit' explicitly
// this avoids us sending specially the expensifyWeb cookie, which makes a CSRF token required
// more on that here: https://stackoverflowteams.com/c/expensify/questions/93
credentials: 'omit',
})
.then((response) => {
// We are calculating the skew to minimize the delay when posting the messages
Expand Down

0 comments on commit ee89e3a

Please sign in to comment.