Friday, December 19, 2014

Re: CSRF Failing after server upgrade.

Hi Ed,

Did you figure it out?

Is your login page getting cached? The CSRF token is re-generated after a successful login, so if you click "login" twice or hit back after a successful login, it won't work.

Do you happen to know, specifically, which django versions you upgraded from/to?

Collin

On Tuesday, December 16, 2014 4:36:56 PM UTC-5, Ed Rahn wrote:
Hello,
I get CSRF 403 errors intermittently while logging in. If I remove just the cookies for the site, it doesn't fix it. If I remove all the cookies on the browser or start in an incognito mode tab it works. Also some first time users get the error
Only my clients seem to be getting this, I have not been able to reproduce it locally.

This started happening after I upgraded from Ubuntu 14.04 to 14.10.

Can anyone help me debug this?

thanks
Ed


--
You received this message because you are subscribed to the Google Groups "Django users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to django-users+unsubscribe@googlegroups.com.
To post to this group, send email to django-users@googlegroups.com.
Visit this group at http://groups.google.com/group/django-users.
To view this discussion on the web visit https://groups.google.com/d/msgid/django-users/5e5613ec-3017-4fdc-bcc2-9407b92ce5ca%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

No comments:

Post a Comment