Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

419 when attempting to add link entry. #598

Closed
RokeJulianLockhart opened this issue Oct 17, 2023 · 7 comments
Closed

419 when attempting to add link entry. #598

RokeJulianLockhart opened this issue Oct 17, 2023 · 7 comments

Comments

@RokeJulianLockhart
Copy link

RokeJulianLockhart commented Oct 17, 2023

  1. image

    https://www.europeanmovement.co.uk/rokejulianlockhart

  2. image

I am able to access the rest of the website (https://linksta.cc/dashboard and https://linksta.cc/studio/links) fine (of course except for #599 (comment)).

@RokeJulianLockhart RokeJulianLockhart changed the title 403 when attempting to add link entry. 419 when attempting to add link entry. Oct 17, 2023
@RokeJulianLockhart
Copy link
Author

Fixed. I had to wait a while, after which I was prompted to reauthenticate. It appears that periodic deauthentication isn't quickly synchronized across all of the system.

@JulianPrieber
Copy link
Member

If your session expires, this is the expected behavior.

@RokeJulianLockhart
Copy link
Author

#598 (comment)

@JulianPrieber, it shouldn't be, because the reason for the expiry isn't communicated to the user, and they're not fully deauthenticated until a good 15 minutes after this begins.

This should be reopened until it is reproducible that no functionality is lost until the user is entirely deauthenticated, rather than a slow random loss of functionality.

@JulianPrieber
Copy link
Member

We could redirect to the login page, instead of displaying the 419?

@RokeJulianLockhart
Copy link
Author

That'd be better, although the problem with that is that my authentication session hadn't expired, so I don't know whether that would merely redirect me to the dashboard (since I was technically authenticated in some places). See the top image for confirmation.

If that issue is fixed, yes, that would be great.

@JulianPrieber
Copy link
Member

What you're experiencing then is most likely an XSRF-TOKEN mismatch, which is a security feature.

@JulianPrieber
Copy link
Member

chrome_zjGoFaMmkY

Some apps handle XSRF-TOKEN mismatches by invalidating the session and logging out the user.

The issue could be caused by opening a form on the app in one tab, then using the app in another, and then submitting the form in the previous tab.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants