CSRF-Invalid login issue with NodeBB 4.14.5
-
Hello, I am seeing "error=csrf-invalid" with a NodeBB installation recently upgraded to 4.14.5.
The installation is NodeBB 4.14.5 (package version 2.31.5) running in Cloudron 9.2.0 on Ubuntu 24.04.4.
Existing sessions continue to work; observed issues are:- All attempts to login result in "error=csrf-invalid" and the message "Login Unsuccessful // We were unable to log you in, likely due to an expired session. Please try again"
- NodeBB users with "admin" privilege cannot actually get to the admin panel (clicking on the "admin" icon takes the user to the /user/admin page rather than the /admin page)
Simple things like "(on the server side) let's restart the app and see what happens" and "(on the client side) let's clear all browser cache/cookies/history/data and let's try this on different browsers (Safari/Brave/Chrome)" have been tried to no avail.
Any advice for what else I should try?
-
Hello, I am seeing "error=csrf-invalid" with a NodeBB installation recently upgraded to 4.14.5.
The installation is NodeBB 4.14.5 (package version 2.31.5) running in Cloudron 9.2.0 on Ubuntu 24.04.4.
Existing sessions continue to work; observed issues are:- All attempts to login result in "error=csrf-invalid" and the message "Login Unsuccessful // We were unable to log you in, likely due to an expired session. Please try again"
- NodeBB users with "admin" privilege cannot actually get to the admin panel (clicking on the "admin" icon takes the user to the /user/admin page rather than the /admin page)
Simple things like "(on the server side) let's restart the app and see what happens" and "(on the client side) let's clear all browser cache/cookies/history/data and let's try this on different browsers (Safari/Brave/Chrome)" have been tried to no avail.
Any advice for what else I should try?
@Axtremus are you using a reverse proxy? Can you send us the config?
-
@julian , thanks for asking ... happy to share config if you don't mind advising me what I need to do you get you the config. (E.g., is there a file I should download and share here or a command I should execute and share the output here?) Thanks.
-
@julian , thanks for asking ... happy to share config if you don't mind advising me what I need to do you get you the config. (E.g., is there a file I should download and share here or a command I should execute and share the output here?) Thanks.
@Axtremus it depends how you set it up. Did you use nginx or caddy or something? How are you accessing the site?
Hello! It looks like you're interested in this conversation, but you don't have an account yet.
Getting fed up of having to scroll through the same posts each visit? When you register for an account, you'll always come back to exactly where you were before, and choose to be notified of new replies (either via email, or push notification). You'll also be able to save bookmarks and upvote posts to show your appreciation to other community members.
With your input, this post could be even better 💗
Register Login