403 禁止在 Vue.js + CodeIgniter 4

Question

I created a simple api using CodeIgniter 4 that currently has 2 routes:

$routes->get('/expenses','Home::getAllExpenses');
$routes->post('/expenses','Home::addRecord');

I display the data using Vue, so the first one returns some json data about expenses while the second one should store the data from a form.

What happens is when I hit submit I get a 403 Forbidden for the post route.

The call is made like this:

this.validationError = false;
                this.request.sum = this.sum;
                this.request.type = this.type;
                this.request.name = this.name;

                this.$http.post(base_api_url + 'expenses', this.request)
                    .then(function(response){
                        console.log(response);
                    });

The get request is ok and nothing on the CI forum helped me:(

Answer 1

Could you check to see if your POST requests also includes cookies (in developer tools > network tab)? It's a fairly common problem that fetch/xhr libraries (like this.$http) do not send credentials (cookies) by default. If the cookies are missing from your, you can enable sending credentials by:

Vue.http.options.credentials = true;

Assuming you are using Vue-resource (this.$http)