0

im trying to get MYSAPSSO2 Cookie from a Portal.

I test with Postman and i can see the cookie in the Cookies Tab:

Screenshots from postman:

Results

Headers:

enter image description here

And here are the parameters i'm passing in the body and header

enter image description here

enter image description here

Now the problem is that i can't get the same values from JavaScript. Postman gives the code snipet to call the service like this:

enter image description here

Then if i try to execute this from my application i get this:

enter image description here

Thanks,

1 Answer 1

1

The MYSAPSSO2 cookie is httpOnly. This means that it cannot be accessed from a client.

https://www.owasp.org/index.php/HttpOnly

However you can create new tokens in the backend with the function module CREATE_RFC_REENTRANCE_TICKET and expose them via OData.

1
  • I've solved my problem, the problem was that the browser handles automatically the cookie MYSAPSSO2. i.e: if you make a post to your portal after that you can call every service you want without passing the cookie because the browser handle it automatically. Regards.
    – Ivan Lynch
    Dec 20, 2018 at 19:56

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.