500 questions
0
votes
0
answers
58
views
Vue/Laravel - CSRF token mismatch
on Vue-Laravel-based environment,CSRF token is initialized server-side -non-sanctum, one token per run-:
routes/web.php
Route::get('csrf-token' , function(){
$token = csrf_token();
return response()-...
1
vote
1
answer
86
views
Missing Authorization Header when calling /api/v1/security/csrf_token/
When making a request to the Superset endpoint /api/v1/security/csrf_token/, the response returns an error:
{
"msg": "Missing Authorization Header"
}
The issue only happens when ...
1
vote
2
answers
127
views
Laravel 12 - Angular 20 - Sanctum SPA - CSRF Token mismatch
Im trying to build a login and create user with CSRF Tokens and it wont run i tried for 3 days now and it wont work because of CSRF token mismatch. i think im missing something small or idk if its a ...
- 55
1
vote
1
answer
56
views
getCSRFToken is not defined error, JavaScript
This is the part of the code in the Django + JavaScript Todo App that is responsible for deleting a note. I need a csrftoken for this, but the JS is showing me an error in the console. What did I do ...
- 13
0
votes
1
answer
85
views
Best pattern for fetching both from server and client in Next.js App Router (handling cookies, CSRF, headers)
In a Next.js App Router project (app/ directory), I’m trying to build a unified fetcher that can work both server-side and client-side, including correct handling of cookies, CSRF tokens, and headers.
...
0
votes
2
answers
366
views
How to resolve CSFR-TOKEN mismatch in Inertia.js?
CSRF-TOKEN Mismatch:
For a virtual host like app.local, when I submit a form using Inertia.js useForm().post(), it shows a 419 error in the app.
Steps to Reproduce:
I have just installed a new Laravel ...
- 252
1
vote
0
answers
59
views
JavaScript `fetch()` won't post data in Django
The issue is encountered in the framework of Django. The related code lines are described below.
These are the HTML lines, in which, the first div and the nested p will be filled with other HTML ...
0
votes
0
answers
51
views
python pytest quart post request with csrf token
How to test POST request, especially to an endpoint which checks for csrf token?
@pytest.mark.asyncio
async def test_fibonacci_pass(client):
response = await client.post('/fibonacci', data=b"...
- 4,280
0
votes
0
answers
38
views
Axios POST request in React Native Returns 419 Error While Insomnia Request Works
I'm developing a React Native app that makes a POST request to the following endpoint:
https://www.animeunity.so/livesearch
When I test the request extracted from my browser in Insomnia, it works ...
- 1
0
votes
0
answers
77
views
Laravel CSRF Token Exception in AWS Production Environment with Nginx Load Balancer
I have deployed a Laravel 11 application on AWS using Application Load Balancer (ALB) with Nginx as the web server. I’m using Redis for session and cache management. The application is built with ...
- 25
1
vote
0
answers
81
views
Antiforgery token for dotnet backend web API interacting with Vue Frontend
I am trying to add an additional (and required) layer of security to my web-application: CSRF Token.
The application uses DOTNET as backend and Vue as frontend, but I do not know where to start... I ...
0
votes
1
answer
162
views
Spring Security with CSRF enabled forces HTTP 302 response
I have a Sring Boot 3.3.0 backend application with Spring Security 6.3.0. The application is a backend for a website, the website itself is written separately in Angular, including the login form. I ...
- 486
1
vote
1
answer
213
views
Flask and CSRF tokens
I'm trying to use csrf tokens with my Flask app, but I noticed after a little bit of the site being open(1 hour), it wouldn't work unless I reloaded, so I did a little testing and found out its ...
- 347
0
votes
2
answers
101
views
CSRF token for AJAX call in attached javascript file
I'm working in Codeigniter 4 with CSRF protection enabled. I have an AJAX call in an attached js file, and I can't figure out how to generate the CSRF token. Previously, I have done it in php files ...
- 87
0
votes
1
answer
198
views
Why does my CSRF token validation fail when deleting multiple entries in PHP?
I'm encountering an issue with CSRF token validation in my PHP application. Specifically, when I try to delete multiple entries using the same CSRF token, I receive a "CSRF attack detected" ...
- 39
1
vote
0
answers
64
views
csrf token missmatch laravel
Used Laravel 8
======= Google translate
When users sign up, I provide a website screen where they can select various account types.
When the user selects a type, the mobile phone authentication ...
- 11
0
votes
1
answer
45
views
Error 403 while running Docker image on Windows, but works on RHEL8
I have a web application made in Django, I build it and run it in Linux Redhat 8 and it works fine.
Trying to run it on Windows using Docker allows me to get into webpage, but I can't login, I just ...
- 9
0
votes
0
answers
82
views
Angular - Spring Boot, CSRF token work on postman, not work on Angular
I have a strange problem, I have a spring boot backend and angular frontend from localhost:4200
The csrf works perfectly from postman, but does not work from angular
I don't understand the problem, I ...
0
votes
0
answers
124
views
Laravel React login form axios post getting 419 CSRF token mismatch error when SESSION_DRIVER set to 'database' instead of 'file' in session.php
So I've managed to get my login form working in React hooked up to Laravel server side by initially setting 'support_credentials' to true in cors.php, having the SESSION_DRIVER set to 'file', and then ...
0
votes
1
answer
123
views
Forbidden (CSRF cookie not set.) when trying to connect from a desktop app
I'm developing a desktop application where users can log in using credentials from my Django website's database. The goal is for users to be able to create posts on the Django website (forum) through ...
- 13
0
votes
0
answers
124
views
Intermittent CSRF token mismatch errors on Django login
I am experiencing intermittent CSRF token mismatch errors in my Django application, specifically on the login, sign-up, and admin login pages.
Environment:
Django version: 4.2 - 4.2.10
Middleware ...
- 353
1
vote
1
answer
141
views
how to call api endpoint in django view using requests python library
here is my view for login functionality
class LoginView(View):
def get(self, request):
return render(request, 'login.html')
def post(self, request):
print('in post')
...
- 21
0
votes
0
answers
93
views
When I turn on CSRF protection, it forbids all of my requests | Spring Security
I was developing my Spring Boot app, with CSRF disabled in my Security Config: http.csrf().disable(). But then I read that it is necessary to keep my website safe, so I turned it back on:
import ...
-1
votes
1
answer
95
views
I implement {% csrf_token%} in my Django templates, but the token appears in the browser
I am very new to django. i am trying to create a login form in django but when i write the csrf_token line after the tag it is showing in the browser view. everything is very confusing for me i don't ...
- 31
1
vote
0
answers
591
views
CSRF token mismatch issue when deployed 2 same laravel project on the one server
I have a Laravel project working on my server with my-domain.com perfectly.
I want to upgrade it to beta version, but won't reflect it to live until complete upgrade.
So I setup subdomain(ex: dev.my-...
- 432