<![CDATA[CSRF-Invalid login issue with NodeBB 4.14.5]]>Hello, I am seeing "error=csrf-invalid" with a NodeBB installation recently upgraded to 4.14.5.
The installation is NodeBB 4.14.5 (package version 2.31.5) running in Cloudron 9.2.0 on Ubuntu 24.04.4.
Existing sessions continue to work; observed issues are:

  • All attempts to login result in "error=csrf-invalid" and the message "Login Unsuccessful // We were unable to log you in, likely due to an expired session. Please try again"
  • NodeBB users with "admin" privilege cannot actually get to the admin panel (clicking on the "admin" icon takes the user to the /user/admin page rather than the /admin page)

Simple things like "(on the server side) let's restart the app and see what happens" and "(on the client side) let's clear all browser cache/cookies/history/data and let's try this on different browsers (Safari/Brave/Chrome)" have been tried to no avail.

Any advice for what else I should try?

]]>https://host1.bosio.info/topic/74d1edc1-905a-4e33-bc96-2c47d29811ff/csrf-invalid-login-issue-with-nodebb-4.14.5RSS for NodeTue, 25 Aug 2026 18:38:23 GMTSun, 02 Aug 2026 05:39:00 GMT60<![CDATA[Reply to CSRF-Invalid login issue with NodeBB 4.14.5 on Sun, 02 Aug 2026 14:53:48 GMT]]>@Axtremus it depends how you set it up. Did you use nginx or caddy or something? How are you accessing the site?

]]>https://host1.bosio.info/post/https://community.nodebb.org/post/107732https://host1.bosio.info/post/https://community.nodebb.org/post/107732Sun, 02 Aug 2026 14:53:48 GMT<![CDATA[Reply to CSRF-Invalid login issue with NodeBB 4.14.5 on Sun, 02 Aug 2026 14:20:13 GMT]]>@julian , thanks for asking ... happy to share config if you don't mind advising me what I need to do you get you the config. (E.g., is there a file I should download and share here or a command I should execute and share the output here?) Thanks.

]]>https://host1.bosio.info/post/https://community.nodebb.org/post/107731https://host1.bosio.info/post/https://community.nodebb.org/post/107731Sun, 02 Aug 2026 14:20:13 GMT<![CDATA[Reply to CSRF-Invalid login issue with NodeBB 4.14.5 on Sun, 02 Aug 2026 12:09:09 GMT]]>@Axtremus are you using a reverse proxy? Can you send us the config?

]]>https://host1.bosio.info/post/https://community.nodebb.org/post/107730https://host1.bosio.info/post/https://community.nodebb.org/post/107730Sun, 02 Aug 2026 12:09:09 GMT