Getting 403 Forbidden while trying to delete confluence groups via rest api

[Eva Kailing]

Hello,

I am trying to delete a bunch of confluence groups via Postman. I am using the Extender for Confluence with a post method and the following url: 

• {CONFLUENCE_URL}/rest/extender/1.0/group/removeGroups

I've got the admin rights to do so and I confirmed it in the basic authentication in postman.

But I always get the answer 403 Forbidden, XSRF check failed.

Does anyone have an idea how to fix this?

Thank's for your help!

[Kishan Sharma · Accepted solution]

Hi @Eva Kailing Welcome to the Atlassian Community!

To call protected APIs from external systems you can add the X-Atlassian-Token header to each request, setting the value to no-check. Adding this header to a request bypasses the server-side XSRF check and allows the request to be fulfilled.

example -
$ curl -u admin:admin -X POST -i "https://xxxx.atlassian.net/example/api/action?username=testUser" -H "X-Atlassian-Token: no-check"

Let me know if that helps.

[Eva Kailing]

Hi @Kishan Sharma

It worked!!

Thanks a lot :)

[Kishan Sharma]

Good to know that it worked for you @Eva Kailing :) If you have found my answer useful, please mark it as accepted, so that it will help other members having similar issue.