axios config

    payload: {
      request: {
        method: 'post',
        url: '/entity/file',
        baseURL: 'http://local.loc',
        responseType: 'json',
        withCredentials: true,
        headers: {
          'Accept': 'application/hal+json, application/json, text/plain, */*',
          'Content-type': 'application/hal+json',
          'Authorization': 'Basic YnZtOmJmbQ==',
        },
        params: {
          _format: 'hal_json',
        },
        data: {'data'},
      },
    },

General

Request URL:http://ibsco.loc/entity/file?_format=hal_json
Request Method:POST
Status Code:403 Forbidden
Remote Address:127.0.0.1:80
Referrer Policy:no-referrer-when-downgrade

Request headers

Access-Control-Allow-Credentials:true
Access-Control-Allow-Origin:http://localhost:8080
Cache-Control:must-revalidate, no-cache, private
Connection:keep-alive
Content-language:en
Content-Type:application/hal+json
Date:Thu, 20 Apr 2017 08:22:59 GMT
Expires:Sun, 19 Nov 1978 05:00:00 GMT
Server:nginx/1.4.6 (Ubuntu)
Transfer-Encoding:chunked
Vary:Origin
X-Content-Type-Options:nosniff
X-Frame-Options:SAMEORIGIN
X-Generator:Drupal 8 (https://www.drupal.org)
X-UA-Compatible:IE=edge

Response headers

Accept:application/hal+json, application/json, text/plain, */*
Accept-Encoding:gzip, deflate
Accept-Language:ru,en-US;q=0.8,en;q=0.6
Authorization:Basic YmZtOmJmbQ==
Connection:keep-alive
Content-Length:316
Content-Type:application/hal+json
Cookie:SESS9320e9867de0f2192f897bdfae8b19ca=GcuXFRaFdmyjzI_zr1mS9gM-lS3gCxn8O2lU4b3ZNwU
Host:ibsco.loc
Origin:http://localhost:8080
Referer:http://localhost:8080/quote-list
User-Agent:Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/57.0.2987.133 Safari/537.36