Hi Armin, I've just added a few hints on CSRF errors to the Installation docs here:
https://wiki.lyrasis.org/display/DSDOC7x/Installing+DSpace#InstallingDSpace-CommonInstallationIssues Could you double check the settings mentioned there? (Since it sounds like you are running / accessing everything via localhost, you shouldn't need the REST API on HTTPS, but the other settings may be worth checking out) We are still working on getting the install docs 100% correct here, so it's also possible you have a setup that is a bit "unexpected" for the dev team. So, if none of those hints help, it'd be good to understand your setup better (Are you running the UI via a simple "yarn start" or something else? Are you just running the backend via Tomcat? When you access the UI or HAL Browser from your browser, are you typing in "localhost"-based URLs or some other URL?) Let us know how it goes & thanks for testing out the installation process of Beta 5! Tim ________________________________ From: [email protected] <[email protected]> on behalf of Armin Wenz <[email protected]> Sent: Tuesday, April 20, 2021 10:51 AM To: DSpace Technical Support <[email protected]> Subject: [dspace-tech] DSpace 7.0 beta5 - Invalid CSRF token Hi, I just installed DSpace 7.0 beta5 and so far everything is working fine. I can access the server via http://locahost:8080/server (the via curl and via the HAL Browser). The UI is reachable at http://locahost:4000 and I can see the action in the debug server logs. But when I try to log in I see org.dspace.app.rest.exception.DSpaceApiExceptionControllerAdvice @ Access is denied. Invalid CSRF token. (status:403) in my server logs. The same error occurs when doing a POST Request in the HAL Browser: http://localhost:8080/server/api/authn { "password"="...", "user"="[email protected]" } Response: { "timestamp": "2021-04-20T15:46:18.119+0000", "status": 403, "error": "Forbidden", "message": "Access is denied. Invalid CSRF token.", "path": "/server/api/authn" } BTW: That user exists, I can get the infos with "./dspace user -L" I am using Debian 11/Firefox 78.9.0esr I already allowed localhost in the Firefox preferences to set cookies. Any clue what I have done wrong or missed? -- Armin Wenz Universitätsbibliothek Mainz Leitung Bibliotheksanwendungen Jakob-Welder-Weg 12 55128 Mainz Tel.: +49 6131 39-29830 http://www.ub.uni-mainz.de -- All messages to this mailing list should adhere to the Code of Conduct: https://duraspace.org/about/policies/code-of-conduct/ --- You received this message because you are subscribed to the Google Groups "DSpace Technical Support" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/dspace-tech/8a8a9d84-acaf-ddfa-ca26-139439a06812%40ub.uni-mainz.de. -- All messages to this mailing list should adhere to the Code of Conduct: https://duraspace.org/about/policies/code-of-conduct/ --- You received this message because you are subscribed to the Google Groups "DSpace Technical Support" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/dspace-tech/DM5PR2201MB114839D1914533345F6E3A6FED489%40DM5PR2201MB1148.namprd22.prod.outlook.com.
