Jasper Kahn created AIRFLOW-2866:
------------------------------------
Summary: Missing CSRF Token Error on Web UI Create/Update
Operations
Key: AIRFLOW-2866
URL: https://issues.apache.org/jira/browse/AIRFLOW-2866
Project: Apache Airflow
Issue Type: Bug
Components: webapp
Reporter: Jasper Kahn
Attempting to modify or delete many resources (such as Connections or Users)
results in a 400 from the webserver:
{quote}{{Bad Request}}
{{The CSRF session token is missing.}}{quote}
Logs report:
{quote}{{[2018-08-07 18:45:15,771] \{csrf.py:251} INFO - The CSRF session token
is missing.}}
{{192.168.9.1 - - [07/Aug/2018:18:45:15 +0000] "POST /admin/connection/delete/
HTTP/1.1" 400 150 "http://localhost:8081/admin/connection/"; "Mozilla/5.0 (X11;
Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.84
Safari/537.36"}}{quote}
Chrome dev tools show the CSRF token is present in the request payload.
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
