# 8.3 File Upload route permissions issue

**URL:** <https://forum.inductiveautomation.com/t/8-3-file-upload-route-permissions-issue/112007>\
**Category:** Module Development\
**Created:** [November 6, 2025, 4:40pm UTC](https://forum.inductiveautomation.com/t/8-3-file-upload-route-permissions-issue/112007 "2025-11-06T16:40:50Z")\
**Posts on this page:** 1\
**Showing post:** 8

<div class="post-metadata">

**Author:** ![pturmel](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/pturmel/32/3295_2.png) [@pturmel](https://forum.inductiveautomation.com/u/pturmel)\
**Post date:** [November 12, 2025, 10:19pm UTC](https://forum.inductiveautomation.com/t/8-3-file-upload-route-permissions-issue/112007/8 "2025-11-12T22:19:09Z")

</div>

> [@paul-griffith](#):
>
> The CSRF token for your current session can be retrieved from `/data/app/session`.

I banged my head on this. Wrong approach, apparently. My IDE is happy with this:

```python
const csrf = useSelector((store: ReduxRootState) => store.userSession.csrfToken);

```

Will test tomorrow. My brain is fried for the day.

---

_[View the full topic](https://forum.inductiveautomation.com/t/8-3-file-upload-route-permissions-issue/112007)._