[SOLVED] Sails JS forbidden POST request

Sails JS forbidden POST request

I'm trying to learn Sails JS and obviously REST API.

I've created a user model which I think works fine (it communicates data with my db). I've also created a signup controller with 4 needed inputs to store a new record in my user collection. (Some other data are generated by this controller to complete the record at the moment of the registration)

I would like to test this controller with POSTMAN, so I go to my routes.js and see :

'POST  /api/v1/entrance/signup': { action: 'entrance/signup' },

But when I enter a POST request at 192.168.1.13:1338/api/v1/entrance/signup with my 4 needed inputs declared I have this answer : Forbidden

I don't know what I do wrong. I've also enabled rest, shortcuts and actions in my blueprints.js

Does someone has an idea ?

Solution

As said below, removing CSRF protection is not an answer as it may expose the api to a security breach. I currently use JWT but it doesn't seems to be as secure as CSRF token so the only right way is to include the token in every HTTP's request header.