Your browser does not seem to support JavaScript. As a result, your viewing experience will be diminished, and you may not be able to execute some actions.

Please download a browser that supports JavaScript, or enable it if it's disabled (i.e. NoScript).

Invalid csrf token and Failed login attemp

N
Neeraj Kaplas 0 last edited by Neeraj Kaplas 0

I have successfully been able to bind my domain to my nodebb installation , but upon trying to login to my nodebb install via the domain name , I get errors like :

Failed login attempt, please try again. Forbidden

AND

invalid csrf token

Login Unsuccessful
We were unable to log you in, likely due to an expired session. Please try again

How do I get rid of these errors and get login to work smoothly?

nodebb version : 1.10.0
nodebb-theme-vanilla version: 10.0.16
Reply Quote 0
1 Reply Last reply
PitaJ Global Moderator last edited by

Check the url value in config.json and make sure it exactly matches the url at which you visit your site (including protocol).
Reply Quote 0
1 Reply Last reply
N
Neeraj Kaplas 0 last edited by

Yes, it is same. But error is still there.
Reply Quote 0
1 Reply Last reply

3
Posts

224
Views

Suggested Topics

G

Unable to login after domain change
Technical Support • • george_i

18

0
Votes

18
Posts

176
Views

G

@GarrettBryan the domain is correctly routed. The only problem is at login/registration. And I tried with the domain only too. I wonder if is not a problem with the server time @PitaJ Initially I login on localhost, which works correctly. Then on Heroku could fail because the server is on a different time zone?
Issue With Login (Sockbot)
Technical Support • • Michael Pfaff

2

0
Votes

2
Posts

53
Views

This is from my logs: 2019-05-01T23:05:47.795Z [4567/1956] - [32minfo[39m: [plugins/spam-be-gone] Settings loaded 2019-05-01T23:05:47.858Z [4567/1956] - [32minfo[39m: Routes added 2019-05-01T23:05:47.860Z [4567/1956] - [32minfo[39m: NodeBB Ready 2019-05-01T23:05:47.867Z [4567/1956] - [32minfo[39m: Enabling 'trust proxy' 2019-05-01T23:05:47.872Z [4567/1956] - [32minfo[39m: NodeBB is now listening on: 0.0.0.0:4567 2019-05-01T23:06:46.203Z [4567/1956] - [31merror[39m: /login invalid csrf token 2019-05-01T23:19:44.904Z [4567/1956] - [31merror[39m: /login invalid csrf token 2019-05-01T23:19:45.822Z [4567/1956] - [31merror[39m: /login invalid csrf token 2019-05-01T23:19:46.745Z [4567/1956] - [31merror[39m: /login invalid csrf token 2019-05-01T23:19:47.671Z [4567/1956] - [31merror[39m: /login invalid csrf token 2019-05-01T23:19:48.797Z [4567/1956] - [31merror[39m: /login invalid csrf token 2019-05-01T23:19:49.637Z [4567/1956] - [31merror[39m: /login invalid csrf token 2019-05-01T23:19:50.764Z [4567/1956] - [31merror[39m: /login invalid csrf token 2019-05-01T23:19:51.806Z [4567/1956] - [31merror[39m: /login invalid csrf token 2019-05-01T23:19:52.799Z [4567/1956] - [31merror[39m: /login invalid csrf token 2019-05-01T23:19:53.673Z [4567/1956] - [31merror[39m: /login invalid csrf token 2019-05-01T23:19:54.520Z [4567/1956] - [31merror[39m: /login invalid csrf token 2019-05-01T23:19:55.402Z [4567/1956] - [31merror[39m: /login invalid csrf token 2019-05-01T23:19:56.383Z [4567/1956] - [31merror[39m: /login invalid csrf token 2019-05-01T23:19:57.203Z [4567/1956] - [31merror[39m: /login invalid csrf token 2019-05-01T23:19:58.085Z [4567/1956] - [31merror[39m: /login invalid csrf token 2019-05-01T23:19:58.957Z [4567/1956] - [31merror[39m: /login invalid csrf token 2019-05-01T23:19:59.803Z [4567/1956] - [31merror[39m: /login invalid csrf token 2019-05-01T23:20:00.659Z [4567/1956] - [31merror[39m: /login invalid csrf token 2019-05-01T23:20:01.574Z [4567/1956] - [31merror[39m: /login invalid csrf token 2019-05-01T23:20:09.481Z [4567/1956] - [31merror[39m: /login invalid csrf token 2019-05-01T23:37:11.087Z [4567/1956] - [32minfo[39m: [plugin/iframely] iframely responded with error: {"status":417,"error":"Iframely could not fetch the given URL. 429"}. Url: http://www.wdrb.com/story/39585380/its-game-on-during-nerdlouvia. Api call: http://iframe.ly/api/iframely?origin=nodebb&align=left&api_key=6973ed56efecf5d8548108&url=http%3A%2F%2Fwww.wdrb.com%2Fstory%2F39585380%2Fits-game-on-during-nerdlouvia 2019-05-02T00:43:42.736Z [4567/1956] - [32minfo[39m: [plugin/iframely] iframely responded with error: {"status":403,"error":"The page is private and requires a login."}. Url: https://hangouts.google.com/hangouts/_/qo43i4llbzdv5gmvxnb4ajunqee. Api call: http://iframe.ly/api/iframely?origin=nodebb&align=left&api_key=6973ed56efecf5d8548108&url=https%3A%2F%2Fhangouts.google.com%2Fhangouts%2F_%2Fqo43i4llbzdv5gmvxnb4ajunqee 2019-05-02T01:32:30.455Z [4567/1956] - [32minfo[39m: [plugin/iframely] iframely responded with error: {"status":403,"error":"Iframely could not fetch the given URL. The page appears to be private or requiring a login"}. Url: http://themonstersknow.com/why-these-tactics/. Api call: http://iframe.ly/api/iframely?origin=nodebb&align=left&api_key=6973ed56efecf5d8548108&url=http%3A%2F%2Fthemonstersknow.com%2Fwhy-these-tactics%2F 2019-05-02T04:45:22.871Z [4567/1956] - [32minfo[39m: [plugin/iframely] iframely responded with error: {"status":417,"error":"Iframely could not fetch the given URL. 429"}. Url: http://www.wdrb.com/story/36868273/nerds-come-together-for-louisvilles-only-tabletop-gaming-convention. Api call: http://iframe.ly/api/iframely?origin=nodebb&align=left&api_key=6973ed56efecf5d8548108&url=http%3A%2F%2Fwww.wdrb.com%2Fstory%2F36868273%2Fnerds-come-together-for-louisvilles-only-tabletop-gaming-convention 2019-05-02T10:21:13.697Z [4567/1956] - [32minfo[39m: [plugin/iframely] iframely responded with error: {"status":403,"error":"Iframely could not fetch the given URL. The page appears to be private or requiring a login"}. Url: https://company.wizards.com/job/game-designer-dungeons-dragons-job-renton-wa-us. Api call: http://iframe.ly/api/iframely?origin=nodebb&align=left&api_key=6973ed56efecf5d8548108&url=https%3A%2F%2Fcompany.wizards.com%2Fjob%2Fgame-designer-dungeons-dragons-job-renton-wa-us 2019-05-02T11:35:57.170Z [4567/1956] - [31merror[39m: /login invalid csrf token 2019-05-02T11:35:58.144Z [4567/1956] - [31merror[39m: /login invalid csrf token 2019-05-02T11:35:59.142Z [4567/1956] - [31merror[39m: /login invalid csrf token 2019-05-02T11:36:00.114Z [4567/1956] - [31merror[39m: /login invalid csrf token 2019-05-02T11:36:01.049Z [4567/1956] - [31merror[39m: /login invalid csrf token 2019-05-02T11:36:01.928Z [4567/1956] - [31merror[39m: /login invalid csrf token 2019-05-02T11:36:02.956Z [4567/1956] - [31merror[39m: /login invalid csrf token 2019-05-02T11:36:03.893Z [4567/1956] - [31merror[39m: /login invalid csrf token 2019-05-02T11:36:05.109Z [4567/1956] - [31merror[39m: /login invalid csrf token 2019-05-02T11:36:06.244Z [4567/1956] - [31merror[39m: /login invalid csrf token 2019-05-02T11:36:07.208Z [4567/1956] - [31merror[39m: /login invalid csrf token 2019-05-02T11:36:08.119Z [4567/1956] - [31merror[39m: /login invalid csrf token 2019-05-02T11:36:16.187Z [4567/1956] - [31merror[39m: /login invalid csrf token 2019-05-02T11:48:57.212Z [4567/1956] - [31merror[39m: /login invalid csrf token
S

Import from SMF failing with "callFn.apply is not a function error"
Technical Support • • signal15

8

0
Votes

8
Posts

616
Views

S

Thinking about this further, it seems like the functionality of this plugin should probably be merged/maintained with master since it's such a core component influencing adoption of NodeBB.
H

Problems with login after upgrading to 1.11.0
Technical Support • • Hans

4

1
Votes

4
Posts

141
Views

H

@FrankM said in Probmes with login after upgrading to 1.11.0: But in config.json i have http://...... Edit it to https:// solved the problem. Before version 1.11.0 i don't have this problem. Thanks, that solved the problem for me as well, changing http to https. And as for you, I did not have this problem before 1.11.0 But then an other problem turned up: "Invalid CSRF Token" Pls see this link https://community.nodebb.org/topic/9222/invalid-csrf-token My solution for this was what is written in the end (I use Apache2) for the record for people finding this via search, for apache2 you have to set this somewhere in your nodebb vhost configuration with ssl RequestHeader set X-Forwarded-Proto "https" without ssl RequestHeader set X-Forwarded-Proto "http" you might have to enable mod_headers to do so! So upgrading to 1.11.0 gave me a problem that had to be solved in 2 steps. First by changing in config.json, then I had to modify Apache2 settings.
J

UNSOLVED Locked out of the forum: Error: misconfigured csrf
Technical Support • • JJSagan

1

0
Votes

1
Posts

727
Views

J

Hello, I have a forum hosted on AWS. The code is synced to master. I am using nginx on the same server, with SSL. Furthermore I am using Redis (provided by AWS). As of today's noon, when I browse the forum's address, I get ERR_TOO_MANY_REDIRECTS on the client side. Looking at the server logs I see "Error: misconfigured csrf". Let me assure you that the config file was not changed. Furthermore Redis is up and running (I can browse the database via Redis desktop manager). I tried resolving it till now (removing all plugins, removing nginx, removing FW, removing SSL, etc. etc.). In addition I changed the config file to: Website Hosting - Mysite.com https... www.mysite.com (the original value). 127.0.0.1:4567 (nginx forwards to that address) Nada... Its frustrating... Any idea ? Thank you in advance! JJ.

| |

Invalid csrf token and Failed login attemp

Suggested Topics

Unable to login after domain change Technical Support • • george_i

Issue With Login (Sockbot) Technical Support • • Michael Pfaff

Import from SMF failing with "callFn.apply is not a function error" Technical Support • • signal15

Problems with login after upgrading to 1.11.0 Technical Support • • Hans

UNSOLVED Locked out of the forum: Error: misconfigured csrf Technical Support • • JJSagan

Unable to login after domain change
Technical Support • • george_i

Issue With Login (Sockbot)
Technical Support • • Michael Pfaff

Import from SMF failing with "callFn.apply is not a function error"
Technical Support • • signal15

Problems with login after upgrading to 1.11.0
Technical Support • • Hans

UNSOLVED Locked out of the forum: Error: misconfigured csrf
Technical Support • • JJSagan