sitecore commerce 9 Disable CSRF when working with Postman If you receive an http 500-internal server error in Postman when you are testing your Sitecore Commerce Engine, you need to disable CSRF validation. You do this in the config.json file located