nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

Getting 403 Forbidden while trying to delete confluence groups via rest api

Eva Kailing_fox3rp

Hello,

I am trying to delete a bunch of confluence groups via Postman. I am using the Extender for Confluence with a post method and the following url:

{CONFLUENCE_URL}/rest/extender/1.0/group/removeGroups

I've got the admin rights to do so and I confirmed it in the basic authentication in postman.

But I always get the answer 403 Forbidden, XSRF check failed.

Does anyone have an idea how to fix this?

Thank's for your help!

Accepted answers

Kishan Sharma

Hi @Eva Kailing Welcome to the Atlassian Community!

To call protected APIs from external systems you can add the X-Atlassian-Token header to each request, setting the value to no-check. Adding this header to a request bypasses the server-side XSRF check and allows the request to be fulfilled.

example -
$ curl -u admin:admin -X POST -i "https://xxxx.atlassian.net/example/api/action?username=testUser" -H "X-Atlassian-Token: no-check"

Let me know if that helps.

All comments

Kishan Sharma

Hi @Eva Kailing Welcome to the Atlassian Community!

example -
$ curl -u admin:admin -X POST -i "https://xxxx.atlassian.net/example/api/action?username=testUser" -H "X-Atlassian-Token: no-check"

Let me know if that helps.

Eva Kailing_fox3rp

Hi @Kishan Sharma

It worked!!

Thanks a lot

Kishan Sharma

Good to know that it worked for you @Eva Kailing If you have found my answer useful, please mark it as accepted, so that it will help other members having similar issue.