Gitlab-plugin: Hook doesn't work when CSRF is enabled

[dblessing]

Before submitting an issue to I have first:

• [x] read the documentation on the homepage
• [x] searched for similar already existing issue

_(if you have performed all the above, remove the paragraph and continue describing the issue with template below)_

Issue

Context

• Gitlab plugin version: 1.3.0
• Gitlab version: 8.9
• Jenkins version: 2.1.4
  

  Logs & Traces

Hook executed successfully but returned HTTP 403

HTTP ERROR 403

Problem accessing /job/TestCiWorkflowProduction/build. Reason:

 No valid crumb was included in the request

---

Powered by Jetty://

---

Problem description

When CSRF protection is enabled in Jenkins, the Web Hook from GitLab fails with the above message. I see some code in this plugin that suggests it should be excluding it's endpoints from CSRF protection but I'm not 100% sure. Is this supposed to work or is it something that needs to be added?

[coder-hugo]

You are using the wrong URL. /project/TestCiWorkflowProduction would be the correct one for your case. The URL mentioned by you is an internal URL of the Jenkins and has nothing to do with this plugin.

[dblessing]

@coder-hugo 😞 Derp. Thanks for pointing that out.

[Kannan1015]

Thanks @coder-hugo