Rest api responding as forbidden

[Tirth]

I am facing issue on rest apis especially on write apis, apis are responding as forbidden, can anyone help me with how to pass header and token in api call?

[Tirth]

I got forbidden error on unvote a post api
Delete api "/api/v3/posts/{pid}/vote"

using axios to perform api in react native
I'm already passing auth token in Authorization and csrf token in _csrf as header

Can anyone help me what I am missing here?

[julian]

@Tirth can you show me the call you're making via cURL instead? It'll help debug as it's a simpler way to make the API call.

No csrf token is needed when you use an API token

[Tirth]

This is my cURL

curl --location --request DELETE 'https://forumapp.findding.in/api/v3/posts/1/vote'
--header 'Authorization: Bearer MY_ BEARER_TOKEN'
--header 'Content-Type: application/json'
--data '{
"_uid": 13,
"delta": -1,
"_csrf": "MY_CSRF"
}'

This above api is responding Forbidden

curl --location 'https://forumapp.findding.in/api/admin/upload/file'
--header 'Authorization: Bearer TOKEN'
--form 'files=@"clouds.jpg"'
--form '_uid="0"'

This upload api responding as below
{
"path": "/api/admin/upload/file",
"error": "[[error:api.master-token-no-uid]]",
"bodyClass": "page-admin page-admin-upload page-admin-file page-status-500 theme-persona user-guest"
}