Question about X-CSRF-ZOSMF-HEADER for ZOSMF service exposed on Zowe API Gateway

[std4lqi]

My code runs on on the same host as Zowe on myzowe.mydomain.com , and ZOSMF is on another host, like myzosmf.mydomain.com .

When my code invokes ZOSMF API from Zowe API Gateway (myzowe.mydomain.com),

• Will Zowe API Gateway always add X-CSRF-ZOSMF-HEADER when forwarding the request to ZOSMF (myzosmf.mydomain.com)?
• If not, any configuration to have Zowe API Gateway to add this header automatically?
• Or I need add this header in my request, so that Zowe API Gateway will forward it to ZOSMF?

Thanks in advance!

[balhar-jakub]

Zowe doesn't add X-CSRF-ZOSMF-HEADER to the requests forwarded through the API Mediation Layer. I don't think there is at the moment configuration to always add the same header for the southbound service e.g. ibmzosmf

Therefore I believe you need to add this header to your request so that Zowe API Gateway forwards it to zOSMF.

[std4lqi]

Many thanks, @balhar-jakub! That's clear to me now.