CSRF token from either the request body or request headers did not match or is missing

Hi @Egor Welcome to the forum!

Yes there is an authentication sequence which is described here Passbolt Help | Authentication in passbolt

This thread has helpful related links as well How to complete initial API auth steps using Postman?