"ForbiddenError: invalid csrf token" On Fresh Install

julian

Hey @overlawled nice to see you switching to NodeBB

I can't reproduce that right now, running v0.6.x and those theme versions... do you see any errors in the browser console when navigating to the login page?

overlawled

I do!

Uncaught SyntaxError: Unexpected token &
nodebb.min.js?0eb3d036:14

Uncaught TypeError: Cannot read property 'maxReconnectionAttempts' of undefined
socketIOConnect @ nodebb.min.js?1431043735683:18915
(anonymous function) @ nodebb.min.js?1431043735683:19495
(anonymous function) @ nodebb.min.js?1431043735683:19509

Uncaught TypeError: Cannot read property 'loggedIn' of undefined
(anonymous function) @ nodebb.min.js?1431043735683:19260
jQuery.Callbacks.fire @ nodebb.min.js?1431043735683:3087
jQuery.Callbacks.self.fireWith @ nodebb.min.js?1431043735683:3199
jQuery.extend.ready @ nodebb.min.js?1431043735683:433
completed @ nodebb.min.js?1431043735683:104

julian

Really... and that's on a fresh install? Weird.

Can you post a link to your forum so we can take a look, and run it in dev mode for now? (./nodebb dev)

If you don't want to post it, PM it to @baris, @psychobunny, or myself

overlawled

http://community.quasargame.com

Nicolas

You have problem with minification of the scripts.
I can encounter this problem several times on day. Until I have found way how to fix it, it was a pain

Temporal solution

Stop Nodebb
Enter nodebb/public directory
Delete src directory, - rm -rf src
Checkout src directory - git checkout .
Start Nodebb

Nicolas

@julian I have found source of the issue.
Minification script does not ignore hidden files, like .DS_Store.

Reproduce

Visit public/src folder, open several files, use finder on Mac. Check if you have .DS_Store files in subdirectories of public/src. Now when you restart NodeBB, minified script will be broken with different artefacts.

Solution

Minification script should include only *.js files.

Temporal Solution 2 for Mac Users

Enter public/src directory.
Delete all .DS_STORE recursively - find . -name '*.DS_Store' -type f -delete

<baris>

@Nicolas Nice catch this should be fixed on master now.

Commits · NodeBB/NodeBB

Node.js based forum software built for the modern web - Commits · NodeBB/NodeBB

GitHub (github.com)

Nicolas

@baris nice!

KingCat

Good job guys. Hopefully the others that are having this issue will find this thread.

maycel

I got same error, and I am using centos system. Can you please help me how to solve the issue?

Thank You!

maycel

What I did was, I installed the lobby app. Some feature are working but most them are not. Like when I tried to change the app setting in admin configuration, I got this Error.

orbiddenError: invalid csrf token
at verifytoken (/home/maycel.casilag/Lobby-App-master/node_modules/express/node_modules/connect/node_modules/csurf/index.js:269:11)
at Object.csrf [as handle] (/home/maycel.casilag/Lobby-App-master/node_modules/express/node_modules/connect/node_modules/csurf/index.js:97:7)
at next (/home/maycel.casilag/Lobby-App-master/node_modules/express/node_modules/connect/lib/proto.js:174:15)
at methodOverride (/home/maycel.casilag/Lobby-App-master/node_modules/express/node_modules/connect/node_modules/method-override/index.js:79:5)
at /home/maycel.casilag/Lobby-App-master/node_modules/express/node_modules/connect/lib/middleware/methodOverride.js:41:7
at methodOverride (/home/maycel.casilag/Lobby-App-master/node_modules/express/node_modules/connect/node_modules/method-override/index.js:79:5)
at Object.handle (/home/maycel.casilag/Lobby-App-master/node_modules/express/node_modules/connect/lib/middleware/methodOverride.js:39:5)
at next (/home/maycel.casilag/Lobby-App-master/node_modules/express/node_modules/connect/lib/proto.js:174:15)
at /home/maycel.casilag/Lobby-App-master/node_modules/express/node_modules/connect/node_modules/express-session/index.js:433:7
at /home/maycel.casilag/Lobby-App-master/sqlite-store.js:65:15

Please help me because I'm stuck.

Thank You!
POST /docusign_test 403 19.811 ms - -