Csrf token validation failed on orangehrm











up vote
0
down vote

favorite












I am getting an error with OrangeHRM platform(Human resources management).



The issue is that when logging to the site after some time (like 15 minutes) site refreshes showing the error at the image below. When logging again everything works as expected.



So i guess the the csrf value is somehow stored in the cache and used when trying to log in for the first time. After failing and refreshing the site uses the real noncached csrf value.



I have found someone with the same issue here (stackoverflow.com) The answer to the problem was that they were serving the site on http only. In my case the error exists in the production environment as well so it's not an https issue.



Any idea is welcome.



Error screenshot










share|improve this question


























    up vote
    0
    down vote

    favorite












    I am getting an error with OrangeHRM platform(Human resources management).



    The issue is that when logging to the site after some time (like 15 minutes) site refreshes showing the error at the image below. When logging again everything works as expected.



    So i guess the the csrf value is somehow stored in the cache and used when trying to log in for the first time. After failing and refreshing the site uses the real noncached csrf value.



    I have found someone with the same issue here (stackoverflow.com) The answer to the problem was that they were serving the site on http only. In my case the error exists in the production environment as well so it's not an https issue.



    Any idea is welcome.



    Error screenshot










    share|improve this question
























      up vote
      0
      down vote

      favorite









      up vote
      0
      down vote

      favorite











      I am getting an error with OrangeHRM platform(Human resources management).



      The issue is that when logging to the site after some time (like 15 minutes) site refreshes showing the error at the image below. When logging again everything works as expected.



      So i guess the the csrf value is somehow stored in the cache and used when trying to log in for the first time. After failing and refreshing the site uses the real noncached csrf value.



      I have found someone with the same issue here (stackoverflow.com) The answer to the problem was that they were serving the site on http only. In my case the error exists in the production environment as well so it's not an https issue.



      Any idea is welcome.



      Error screenshot










      share|improve this question













      I am getting an error with OrangeHRM platform(Human resources management).



      The issue is that when logging to the site after some time (like 15 minutes) site refreshes showing the error at the image below. When logging again everything works as expected.



      So i guess the the csrf value is somehow stored in the cache and used when trying to log in for the first time. After failing and refreshing the site uses the real noncached csrf value.



      I have found someone with the same issue here (stackoverflow.com) The answer to the problem was that they were serving the site on http only. In my case the error exists in the production environment as well so it's not an https issue.



      Any idea is welcome.



      Error screenshot







      php symfony caching csrf browser-cache






      share|improve this question













      share|improve this question











      share|improve this question




      share|improve this question










      asked Nov 19 at 11:10









      Δημήτρης Αραμπατζής

      264




      264





























          active

          oldest

          votes











          Your Answer






          StackExchange.ifUsing("editor", function () {
          StackExchange.using("externalEditor", function () {
          StackExchange.using("snippets", function () {
          StackExchange.snippets.init();
          });
          });
          }, "code-snippets");

          StackExchange.ready(function() {
          var channelOptions = {
          tags: "".split(" "),
          id: "1"
          };
          initTagRenderer("".split(" "), "".split(" "), channelOptions);

          StackExchange.using("externalEditor", function() {
          // Have to fire editor after snippets, if snippets enabled
          if (StackExchange.settings.snippets.snippetsEnabled) {
          StackExchange.using("snippets", function() {
          createEditor();
          });
          }
          else {
          createEditor();
          }
          });

          function createEditor() {
          StackExchange.prepareEditor({
          heartbeatType: 'answer',
          convertImagesToLinks: true,
          noModals: true,
          showLowRepImageUploadWarning: true,
          reputationToPostImages: 10,
          bindNavPrevention: true,
          postfix: "",
          imageUploader: {
          brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
          contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
          allowUrls: true
          },
          onDemand: true,
          discardSelector: ".discard-answer"
          ,immediatelyShowMarkdownHelp:true
          });


          }
          });














          draft saved

          draft discarded


















          StackExchange.ready(
          function () {
          StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f53373361%2fcsrf-token-validation-failed-on-orangehrm%23new-answer', 'question_page');
          }
          );

          Post as a guest















          Required, but never shown






























          active

          oldest

          votes













          active

          oldest

          votes









          active

          oldest

          votes






          active

          oldest

          votes
















          draft saved

          draft discarded




















































          Thanks for contributing an answer to Stack Overflow!


          • Please be sure to answer the question. Provide details and share your research!

          But avoid



          • Asking for help, clarification, or responding to other answers.

          • Making statements based on opinion; back them up with references or personal experience.


          To learn more, see our tips on writing great answers.





          Some of your past answers have not been well-received, and you're in danger of being blocked from answering.


          Please pay close attention to the following guidance:


          • Please be sure to answer the question. Provide details and share your research!

          But avoid



          • Asking for help, clarification, or responding to other answers.

          • Making statements based on opinion; back them up with references or personal experience.


          To learn more, see our tips on writing great answers.




          draft saved


          draft discarded














          StackExchange.ready(
          function () {
          StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f53373361%2fcsrf-token-validation-failed-on-orangehrm%23new-answer', 'question_page');
          }
          );

          Post as a guest















          Required, but never shown





















































          Required, but never shown














          Required, but never shown












          Required, but never shown







          Required, but never shown

































          Required, but never shown














          Required, but never shown












          Required, but never shown







          Required, but never shown







          Popular posts from this blog

          Create new schema in PostgreSQL using DBeaver

          Deepest pit of an array with Javascript: test on Codility

          Costa Masnaga