{"action":"created","issue":{"url":"https://api.github.com/repos/DoSomething/dosomething/issues/4145","labels_url":"https://api.github.com/repos/DoSomething/dosomething/issues/4145/labels{/name}","comments_url":"https://api.github.com/repos/DoSomething/dosomething/issues/4145/comments","events_url":"https://api.github.com/repos/DoSomething/dosomething/issues/4145/events","html_url":"https://github.com/DoSomething/dosomething/issues/4145","id":60403341,"number":4145,"title":"Can't authenticate with Chrome Postman","user":{"login":"aaronschachter","id":1236811,"avatar_url":"https://avatars.githubusercontent.com/u/1236811?v=3","gravatar_id":"","url":"https://api.github.com/users/aaronschachter","html_url":"https://github.com/aaronschachter","followers_url":"https://api.github.com/users/aaronschachter/followers","following_url":"https://api.github.com/users/aaronschachter/following{/other_user}","gists_url":"https://api.github.com/users/aaronschachter/gists{/gist_id}","starred_url":"https://api.github.com/users/aaronschachter/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/aaronschachter/subscriptions","organizations_url":"https://api.github.com/users/aaronschachter/orgs","repos_url":"https://api.github.com/users/aaronschachter/repos","events_url":"https://api.github.com/users/aaronschachter/events{/privacy}","received_events_url":"https://api.github.com/users/aaronschachter/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/DoSomething/dosomething/labels/%23api","name":"#api","color":"bfdadc"},{"url":"https://api.github.com/repos/DoSomething/dosomething/labels/@bender","name":"@bender","color":"009800"}],"state":"closed","locked":false,"assignee":null,"milestone":null,"comments":3,"created_at":"2015-03-09T20:20:57Z","updated_at":"2015-03-17T22:42:34Z","closed_at":"2015-03-17T22:42:34Z","body":"The `seckit` module introduced in #3683 is blocking authenticating using Postman, outputting a watchdog message: \r\n\r\n````\r\nPossible CSRF attack was blocked. IP address: 72.220.194.178, Origin: chrome-extension://fdmmgilgnpjigdojojpjoooidkmcomcm.\r\n````\r\n\r\nA dev can workaround this when developing locally by disabling the SecKit module `drush -y dis seckit`, but leaves us hanging when testing API authentication against stage or production.\r\n\r\nPossible solutions:\r\n* Find a different tool that SecKit likes\r\n* Something else\r\n\r\ncc @jonuy @deadlybutter "},"comment":{"url":"https://api.github.com/repos/DoSomething/dosomething/issues/comments/82630105","html_url":"https://github.com/DoSomething/dosomething/issues/4145#issuecomment-82630105","issue_url":"https://api.github.com/repos/DoSomething/dosomething/issues/4145","id":82630105,"user":{"login":"aaronschachter","id":1236811,"avatar_url":"https://avatars.githubusercontent.com/u/1236811?v=3","gravatar_id":"","url":"https://api.github.com/users/aaronschachter","html_url":"https://github.com/aaronschachter","followers_url":"https://api.github.com/users/aaronschachter/followers","following_url":"https://api.github.com/users/aaronschachter/following{/other_user}","gists_url":"https://api.github.com/users/aaronschachter/gists{/gist_id}","starred_url":"https://api.github.com/users/aaronschachter/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/aaronschachter/subscriptions","organizations_url":"https://api.github.com/users/aaronschachter/orgs","repos_url":"https://api.github.com/users/aaronschachter/repos","events_url":"https://api.github.com/users/aaronschachter/events{/privacy}","received_events_url":"https://api.github.com/users/aaronschachter/received_events","type":"User","site_admin":false},"created_at":"2015-03-17T22:42:34Z","updated_at":"2015-03-17T22:42:34Z","body":"@jonuy for the win"}}