xsrf check failed

Question

Using JIRA Cloud. When I use cURL to create an issue, I get the response "XSRF check failed". If I pass the wrong auth credentials I get a 401 error. I am using Basic HTTP auth. I am passing the X-Atlassian-Token: no-check header.

This was working fine until a few weeks ago. Any help is appreciated.

Charlie Misonne · Answer

how do you deal with this when the rest call is made form javascript in the browser?
As far as I'm aware it's not possible to alter the origin header

Scott Welker · Answer

For the benefit of others, depends upon the version. The v5.10 Confluence REST API gave me the following. Presumably JIRA followed suit.

"Use of the 'nocheck' value for X-Atlassian-Token has been deprecated since rest 3.0.0. Please use a value of 'no-check' instead."

leonliusg · Answer

try to add a header name: "origin", value: JIRA base url