GraphQL calls #1254

New issue

Closed

opened 2026-03-16 19:30:21 +03:00 by kerem · 3 comments

kerem commented

2026-03-16 19:30:21 +03:00

Owner

Originally created by @Leon-Luu on GitHub (Dec 5, 2023).
Original GitHub issue: https://github.com/hoppscotch/hoppscotch/issues/3623

Is there an existing issue for this?

I have searched the existing issues

Current behavior

When perform the GraphQL query, it is asking to have the cookie in the header. How can we bypass the cookie? We have generated the Access_token and provide this to the header (or Authorization) which should be enough for the normal REST / GraphQL call..

Steps to reproduce

Get the Access_token to https://login.microsoftonline.com/${{TENANT_ID}}/oauth2/v2.0/token
Perform a GraphQL API request with Postman/Curl to our self hosted: https://hpsapi.test.com/graphql
with headers:
Authorization : Bearer ${{Access_token }}

Body (GraphQL query):

query Me {
me {
uid
displayName
email
photoURL
isAdmin
createdOn
currentRESTSession
currentGQLSession
}
}

Response:
{
"errors": [
{
"message": "auth/cookies_not_found",
"extensions": {
"code": "FORBIDDEN",
"response": {
"statusCode": 403,
"message": "auth/cookies_not_found",
"error": "Forbidden"
}
}
}
],
"data": null
}

Environment

Production

Version

Self-hosted

Originally created by @Leon-Luu on GitHub (Dec 5, 2023). Original GitHub issue: https://github.com/hoppscotch/hoppscotch/issues/3623 ### Is there an existing issue for this? - [X] I have searched the existing issues ### Current behavior When perform the GraphQL query, it is asking to have the cookie in the header. How can we bypass the cookie? We have generated the Access_token and provide this to the header (or Authorization) which should be enough for the normal REST / GraphQL call.. ### Steps to reproduce 1) Get the Access_token to https://login.microsoftonline.com/${{TENANT_ID}}/oauth2/v2.0/token 2) Perform a GraphQL API request with Postman/Curl to our self hosted: https://hpsapi.test.com/graphql with headers: Authorization : Bearer ${{Access_token }} Body (GraphQL query): query Me { me { uid displayName email photoURL isAdmin createdOn currentRESTSession currentGQLSession } } Response: { "errors": [ { "message": "auth/cookies_not_found", "extensions": { "code": "FORBIDDEN", "response": { "statusCode": 403, "message": "auth/cookies_not_found", "error": "Forbidden" } } } ], "data": null } ### Environment Production ### Version Self-hosted