Ambari api POST抱怨CSRF保护

Question

我试图通过Ambari API使用以下命令设置hbase属性

curl -u "admin:admin" -i -X POST -d '{"type": "hbase-site", "tag": "version3", "properties" : {"hbase.regionserver.global.memstore.size" : "0.6"}}' https://abct.net/api/v1/clusters/xyz/configurations

但是一直出现以下错误

HTTP/1.1 400 Bad Request
Content-Length: 107
Content-Type: text/plain
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Server: Microsoft-IIS/8.5
x-ms-hdi-active: 10.8.18.29
X-Frame-Options: DENY
X-XSS-Protection: 1; mode=block
User: admin
X-Powered-By: ARR/3.0
Set-Cookie: AMBARISESSIONID=2e8ortl32j1p7zdjatigdgvg;Path=/;HttpOnly; path=/; secure
X-Powered-By: ASP.NET
Date: Mon, 12 Sep 2016 18:19:38 GMT
{
  "status" : 400,
  "message" : "CSRF protection is turned on. X-Requested-By HTTP header is required."
}

Answer 1

事实证明，除了GET请求之外，您必须将请求头添加到请求中。

你可以用

添加标题

curl --header "X-Requested-By: my_computer_name"

或

Answer 2

我在c# Rest客户端有同样的问题。使用Brig的答案修复它:

        HttpClientHandler handler = new HttpClientHandler
        {
            Credentials = new System.Net.NetworkCredential("xxxx", "yyyyy"),
        };
        using (var httpClient = new HttpClient(handler))
        {
            //"X-Requested-By: my_computer_name"
            httpClient.DefaultRequestHeaders.Add("X-Requested-By","my_computer_name");