Hi @ABC
However, how can I create that
X-CSRFToken
in order to try this out?
There’s an API for fetching CSRF tokens:
And does this have to be done from on the system where tutor is running, or can another instructor do it if they put in the site’s full URL instead of localhost, and they have the right authentication token?
Yes, users need to be authenticated to the site in order to use the API.
But you should be able to hit these endpoints from the site’s full URL instead of localhost.
Let us know if this works for you?