CSRF Failed: CSRF token missing. When calling the API within a plugin

[PaulR282]

I have a plugin where I need to do an API call in JavaScript. Locally in Python, it runs just fine, but within the plugin, I always get a 403 Forbidden with the response: CSRF Failed: CSRF token missing. I tried adding the URL to CSRF_TRUSTED_ORIGINS in the configuration.py like mentioned in #9043 but without any success. I enabled debug mode and logging, but the docker container log only states a 403 without more details. Any ideas?

[PaulR282]

Fixed it by parsing the csrf from the jinja template to the js fetch function header ("X-CSRFToken": csrf). The Authorization Token is also not needed if you parse the csrf Token.