"Error 403 No valid crumb was included in the request" error

Hi,

Please with the error Error 403 No valid crumb was included in the request.

I’ve checked, I am using the latest version of Postman. This issue has been there for a little while now.

I am just trying to POST a request to my server at http://localhost:8000/login, and below is the response I get:

<html>

<head>
    <meta http-equiv="Content-Type" content="text/html;charset=ISO-8859-1" />
    <title>Error 403 No valid crumb was included in the request</title>
</head>

<body>
    <h2>HTTP ERROR 403 No valid crumb was included in the request</h2>
    <table>
        <tr>
            <th>URI:</th>
            <td>/api/login</td>
        </tr>
        <tr>
            <th>STATUS:</th>
            <td>403</td>
        </tr>
        <tr>
            <th>MESSAGE:</th>
            <td>No valid crumb was included in the request</td>
        </tr>
        <tr>
            <th>SERVLET:</th>
            <td>Stapler</td>
        </tr>
    </table>
    <hr /><a href="https://eclipse.org/jetty">Powered by Jetty:// 10.0.12</a>
    <hr />

</body>

</html>

How do I go about fixing this, please?

I don’t use Postman very often, but I have been using it on accasions for years now. I never had any problem with it before.

Thank you.

Hey @tuvihuyenkiem :wave:

Welcome to the Postman community :postman:

When was the last time you saw this particular request working? Is there anything different about those successful ones and this one?

That’s a response coming from the server, do you have any more information about the API? What parameters is that expecting for that route?

Do you have any additional logging on the server side that could lead you more information about the error.

1 Like

Hi Danny,

Thank you for looking into this.

The server is my ongoing project. This particular route expects a JSON like the below:

{"email": "chirstian.koblick.10004@gmail.com", "password": "password"}

I have currently disabled CORS on the server. The request is working right now:

– I have written simple HTML page, which submits request to it via JQuery AJAX. The server responds as expected.

I have some simple print line every the server receives a request.

This request via Postman DID NOT reach the server at all: I did not see the print line from the server.

With Testfully, this request does get to the server.

With Postman, I am not sure who is rejecting this request…

Thank you again.

Hi,

I would just like to show another fail case. I am using Windows 10, my browsers can access this page just fine:

http://localhost/work/http_test.html

When I run a Postman GET on the above URL, the response from Postman is 403 Forbidden, and the response HTML is:

<html>

<head>
    <meta http-equiv='refresh' content='1;url=/login?from=%2Fwork%2Fhttp_test.html' />
    <script>
        window.location.replace('/login?from=%2Fwork%2Fhttp_test.html');
    </script>
</head>

<body style='background-color:white; color:white;'>


    Authentication required
    <!--
-->

</body>

</html>

Thank you.

Hi,

Found it :slight_smile: Go to:

File > Settings > Proxy turn off Use custom proxy configuration.

Thank you.