How to set CSRF token to make a POST call via Destinations in HANA XS

Question

I have a requirement where I would want to make a POST call to Gateway Service,which would need a CSRF token.
I fetch the CSRF token and then I use the same token during POST.
Hence i set this in $.request.headers() .
I know that I have to set the cookie as well for CSRF so I set the headers as
req.headers.set("Cookie","'sap-XSRF_GIQ_100=TQRYJKzJSH8SknthcwRQFA%3d%3d20140425093233hxBe2w9qL9AjCtnh3gsIvPP6-IwsfZB2lqE5RtfGH8A%3d'")
But this fails with CSRF token validation
I found that the cookie value is not set in the service.
How are cookies handled in  Hana how can i set my csrf and XSRF-Token cookie value in the request
Thanks,

Answer 1

Here is example code where I do this very thing - get the CSRF token for an ABAP/Gateway service and use it in the request. The CSRF Token should be a header not a cookie.
var dest = $.net.http.readDestination("WileECoyoteABAP.services", "ZWILEECOYOTE_SRV");
  var client = new $.net.http.Client();
  //Get CSRF Token
  var CSRF = getCSRFToken(dest, client);
  //Make Request
  var req = new $.web.WebRequest($.net.http.POST, 'ACMEItemCollection/');
  req.headers.set("x-csrf-token",CSRF);
  req.headers.set("Content-Type","application/json");
  req.setBody('{"d": {"ItemId": "9999999999","Item": "'+Items.Details[0].ITEM+'"}}');
  client.request(req, dest);
  var response = client.getResponse();
function getCSRFToken(dest, client){
  var req = new $.web.WebRequest($.net.http.GET, 'ACMEItemCollection/?$top=1&$format=json');
  req.headers.set("x-csrf-token", "fetch");
  client.request(req, dest);
  var response = client.getResponse();
  var CSRF = response.headers.get("x-csrf-token");
  if(response.status===200){}
  else{
  handleErrors(response);
  return CSRF;