Return to Question

     ... build params ...
     return http.get(url,
        { params: params }).pipe(
            map(
                (response: Response) => {
                    ... handle response ...
                    return data;
                },
                (error: any) => {
                    console.log(error);
                }
            )
        );

    ... build body ...
    return http.post(url, body, 
       { headers: { 'Accept': ['application/json', 'text/plain', '*/*'], 'Content-Type': 'application/json' } });

... build params ...
return http.get(url,
  { params: params }).pipe(
    map(
      (response: Response) => {
        ... handle response ...
        return data;
      },
      (error: any) => {
        console.log(error);
      }
    )
  );

... build body ...
return http.post(url, body, 
  { headers: { 'Accept': ['application/json', 'text/plain', '*/*'], 'Content-Type': 'application/json' } });

In the browser console I get a 403: Access to the specified resource has been forbidden error.

In Tomcat I get: CSRF token in cookies/request header is empty or values does not match

In the browser console I get following error,

403: Access to the specified resource has been forbidden error.

In Tomcat I get following error,

CSRF token in cookies/request header is empty or values does not match