Hi Benjamin,
yes, I did put the token there. The Stop link works fine for me if I put it in a Webbrowser. But it didn’t work as a rest call from within maptool.
I think your webservice require a Referer-Header for the “online/frontend-api/stop-all” call (Like the error message says). All other calls like “online/frontend-api/elements/123/play” didn’t require a “Referer-Header”.
Therefore all calls beside the “stop-all” call works fine for me, when I call them with the Maptool REST function.
This is the error I get on my Request:
CSRF verification failed. Request aborted.
You are seeing this message because this HTTPS site requires a ‘Referer header’ to be sent by your Web browser, but none was sent.
This header is required for security reasons, to ensure that your browser is not being hijacked by third parties.
If you have configured your browser to disable ‘Referer’ headers, please re-enable them, at least for this site, or for HTTPS connections, or for’same-origin’ requests.