如何在 IONIC angular 中没有验证问题的情况下将 csrf-token 传递给第二个 API 调用

Question

There are 2 SAP API's which I want to use 1st API gets me the x-csrf-token from header which I need to pass to 2nd API as request header. 第一次 API 调用

fetchIsAliveSetDetails(token,order){
    console.log("INSIDE fetchIsAliveSetDetails");
    
      const httpOptions: Object = {
        headers: new HttpHeaders({
          'x-csrf-token': 'fetch',
          'Authorization':'Bearer '+token,
          'Access-Control-Allow-Headers':'*'
      }),
        observe: 'response',
    };
    this.http.get<any>(this.isAliveSetURL, httpOptions).pipe(first()).subscribe(
      (res)  => {
       var csrfToken = res.headers.get("x-csrf-token");
       this.sendOrderSet(order,csrfToken,this.oAuthToken);
      }, (err) => {
        console.log(JSON.stringify(err));
        return "error";
      }
    );
  }

回复

这个 x-csrf-token 被传递给第二个 API 调用，但是当我点击第二个 API 时，它说 CSRF 令牌验证失败 第二个 ZDB974238714CA8DE634A7CE1D083A14 的代码

sendOrderSet(order,xToken,token){
      const httpOptions: Object = {
        headers: new HttpHeaders({
          'x-csrf-token':xToken,
          'Authorization':'Bearer '+token,
          'content-type':'application/json'
      }),
      //withCredentials:true
    };
    this.http.post(this.SAP_API_URL + "/SalesOrderSet",order,httpOptions).subscribe(
      (res)  => {
        console.log("salesOrder"+res);
        return "success ";
      }, (err) => {
        console.log("-- -- "+JSON.stringify(err));
        return "error";
      }
    );
  }

但响应是 403：禁止响应： 我也尝试过发送 withCredentials:true 但它说响应： 如果我需要添加 Access-Control-Allow-Credentials:true 在哪里添加？