UniFi OS enforces CSRF protection on the login endpoint itself and returns 403 if Origin/Referer headers are absent, regardless of whether the credentials are correct. Required headers: Origin: https://controller:port Referer: https://controller:port/login Documented in Art-of-WiFi UniFi-API-client reference implementation. https://claude.ai/code/session_01UsuvFAmmeagtQa14QA4iaq |
||
|---|---|---|
| .. | ||
| Auth.php | ||
| Database.php | ||
| Mailer.php | ||
| UniFiController.php | ||