Since the fortigate upgrade from 7.0.12 to 7.2.6 we noticed a problem with fortiosapi.
When creating an address we now get a 403 error.
we use https port 10443
the name of the Cookie is not
'ccsrftoken'
but
'ccsrftoken_10443'
the result of this is that the session header does not have an X-CSRFTOKEN.
As a workaround, I adjusted the update_cookie routine:
if cookie.name == 'ccsrftoken':
changed to
if cookie.name == 'ccsrftoken' or cookie.name == 'ccsrftoken_10443':
now it works for me....