Community

Upgrading to 6.0... CSRF token error. [solved]

General Discussion
  • A

    @kevin 0.6.0 isn't considered stable, so may introduce new issues that still require fixes. If you're only testing, then by all means use 0.6.0 to see how it performs, but if you're running an environment, and 0.6.0 doesn't work for you, you can't go back to 0.5.x. Your mileage will vary when it comes to using 0.6.0, support will usually only come from the devs, as I can't think of many other community reps that run latest in production.

    Caveats, you may run into issues upgrading, read the errors, they'll tell you the issue (usually). Plugins that you currently use will need updating to the 0.6.0 versions (@latest) on npm, plugins you rely on may not yet be ported to 0.6.0.

    If you're happy with all of those warnings:

    In your nodebb folder.

    git checkout master
    git pull
    ./nodebb upgrade
    ./nodebb restart

    If you've made any changes to core nodebb or it's themes, you may get an error at the git pull stage, you will need to handle those changes, either via a stash or merge. I personally use stash, as I run a relatively vanilla NodeBB.

    Hope that helps.

    This could probably be a life bible for everyone that is thinking of using Master, just replace the version numbers as required. 😆

    K 1 Reply
    1
  • K

    @a_5mith
    yep, while trying to install 6.0 it broke the whole website. lol. How do I downgrade?

    A 1 Reply
    0
  • julianJ

    Depends how it broke. If you've upgraded the database, there is no going back unless you backed up your database before upgrading.

    What errors do you see? Most likely a plugin you installed needs upgrading.

    0
  • A

    @kevin as Julian said (and me in my first post actually), you don't. That's why its considered unstable/development. Look through your logs, for where it failed and post here. It will say something like can not find x of undefined or something, then the line below will be the location, if the location is a plugin you've installed, run npm install [email protected]

    Do this for each error.

    0
  • K

    I cant log in, I just get "Failed login attempt, please try again. Forbidden"

    24/11 21:47 [3644] - error: /login
 Error: invalid csrf token
at module.exports (/root/nodebb/node_modules/csurf/node_modules/http-errors/index.js:32:16)
at verifytoken (/root/nodebb/node_modules/csurf/index.js:237:11)
at csrf (/root/nodebb/node_modules/csurf/index.js:100:7)
at Layer.handle [as handle_request] (/root/nodebb/node_modules/express/lib/router/layer.js:82:5)
at next (/root/nodebb/node_modules/express/lib/router/route.js:100:13)
at Route.dispatch (/root/nodebb/node_modules/express/lib/router/route.js:81:3)
at Layer.handle [as handle_request] (/root/nodebb/node_modules/express/lib/router/layer.js:82:5)
at /root/nodebb/node_modules/express/lib/router/index.js:235:24
at Function.proto.process_params (/root/nodebb/node_modules/express/lib/router/index.js:313:12)
at /root/nodebb/node_modules/express/lib/router/index.js:229:12

    and also can't register either.

    24/11 22:39 [1094] - error: /register
Error: invalid csrf token
at module.exports (/root/nodebb/node_modules/csurf/node_modules/http-errors/index.js:32:16)
at verifytoken (/root/nodebb/node_modules/csurf/index.js:237:11)
at csrf (/root/nodebb/node_modules/csurf/index.js:100:7)
at Layer.handle [as handle_request] (/root/nodebb/node_modules/express/lib/router/layer.js:82:5)
at next (/root/nodebb/node_modules/express/lib/router/route.js:100:13)
at Route.dispatch (/root/nodebb/node_modules/express/lib/router/route.js:81:3)
at Layer.handle [as handle_request] (/root/nodebb/node_modules/express/lib/router/layer.js:82:5)
at /root/nodebb/node_modules/express/lib/router/index.js:235:24
at Function.proto.process_params (/root/nodebb/node_modules/express/lib/router/index.js:313:12)
at /root/nodebb/node_modules/express/lib/router/index.js:229:12
    K 1 Reply
    0
  • K

    Fixed. Had to remove all the <input CSRF> references in login.tpl, register.tpl and the header.tpl.

    0
  • julianJ

    @kevin It sounds like your vanilla and lavender theme packages were not updated along with core.

    1
  • ShardS

    Oho! That might be the issue with my plugin as Im running a sloppily forked theme.

    1
  • ShardS

    Sadly, i don't seem to be able to verify this. But it was a good excuse to prune presently duplicate files from my theme.

    It appears that something has broken my plugin as well as the imgur plugin I based it on.

    I suspect this error is relevant

    warn: [hotswap] Could not find router in stack with hotswapId auth

    or this one:

    warn: [hotswap] Could not find router in stack with hotswapId plugins

    I'm still digging through the plugin changes.

    Running HEAD as of about half an hour ago.

    0
  • ShardS

    https://community.nodebb.org/topic/2750/new-relic-nodejs-agent-is-not-compatible-with-nodebb-forum/3

    Doh.

    0
  • ShardS

    And yes, cleaning out the stale, stray files from when I originally cloned off of vanilla fixed the csrf issues I was having.

    0

Suggested Topics

  • H

    Upload Image Times: Server response parsing error

    General Discussion
    0 Votes
    2 Posts
    272 Views
    julianJ

    Can you please share the server-side error? This client-side error is not something we can use, unfortunately.

  • O

    Strike Out Toic (mark as solved)

    General Discussion
    0 Votes
    2 Posts
    554 Views
    The WormsT

    Use plugin question : https://github.com/NodeBB/nodebb-plugin-question-and-answer

    Edit library.js

    change :

    topic.title = '<span class="answered"><i class="fa fa-question-circle"></i> Solved</span> ' + topic.title;

    by

    topic.title = '<span class="answered"><i class="fa fa-question-circle"></i> Solved</span> <strike>' + topic.title + '</strike>';

    enjoy 😉

  • MdghruutM

    [SOLVED] Need help creating a user in nodebb from php

    General Discussion
    0 Votes
    1 Posts
    1656 Views
    MdghruutM

    I'm trying to create a user via php to be recognized by nodebb authentication form. I do this via predis, so I can talk to redis via php.
    This is the relevant part of the code that creates a user in redisdb for nodebb in php: http://pastebin.com/GZWFvuWc

    But sadly, when I tried to login with such created account via php it didn't work and said "User does not exists".
    I checked all 'legit' userdata with my userdata created by php and I can't detect any flaws

    This is what I told php to create in redis, it's all verified and there:

    populate 'user:#' with 22 key's where # is uid populate 'email:uid' with user email and uid populate 'group:registered-users:members' with uid populate 'users:joindate' with 0 and uid populate 'users:joindate' with 0 and uid populate 'users:postcount' with 0 and uid populate 'reputation' with 0 and uid populate 'username:uid' with username and uid populate 'userslug:uid' with userslug and uid

    What am I missing :C??? I checked redis and the data is all their, but nodebb says the user does not exists

    EDIT: I checked the users tab in admin and saw that the username is there that was created from php. After I press the save button on the profile edit page of that profile, that account can then login! how strange. I'm going to do more digging until someone knows what i'm missing here.

    EDIT 2: I forgot slugifying userslug:uid in redis. Finally fix it 🙂

  • X

    error: Auth error: Error: ERR invalid password

    General Discussion
    0 Votes
    12 Posts
    5822 Views
    X

    yes I did.

    [email protected] [/etc/nginx/vhosts]# nginx -t
    nginx: the configuration file /etc/nginx/nginx.conf syntax is ok
    nginx: configuration file /etc/nginx/nginx.conf test is successful

  • K

    Proxy Error

    General Discussion
    0 Votes
    3 Posts
    1599 Views
    K

    Sure, this:

    {
    "base_url": "http://xxx.yyy.com",
    "port": "4567",
    "use_port": false,
    "secret": "secret-removed",
    "bind_address": "0.0.0.0",
    "database": "redis",
    "redis": {
    "host": "127.0.0.1",
    "port": "6379",
    "password": "",
    "database": "0"
    },
    "bcrypt_rounds": 12,
    "upload_path": "/public/uploads",
    "relative_path": ""
    }

Copyright © 2023 NodeBB | Contributors