mirror of
https://github.com/R0m1k3/CollectFlow.git
synced 2026-10-11 17:26:32 +02:00
Raw and in-page websockets with a self-generated xrfkey are rejected (403). Switch to the Qlik Capability API (require(['js/qlik']) → openApp → createCube), which reuses the authenticated page session and manages the engine ws + xrfkey internally. Auth via injected X-Qlik-Session cookie (Node ticket flow) + httpCredentials. Logs rich page diagnostics on failure. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>