I think you need to provide a x-csrf-token header along with the cookie. I usually find them with my cookie data in the developer console (using Chrome). Or attached to a request payload (again, on Chrome you can view the network tab to see outgoing and incoming HTTP requests).
Keep in mind though that this token isn’t long lasting and expires quite frequently so you’d need to find a way to get the new token if this program you’re making is long lasting.
Let me know where you get with it. ![]()