Issue #200: CRSF Check Failing (403) on Form Submit (conservancy/kallithea)

Wed Mar 23 19:52:16 UTC 2016

New issue 200: CRSF Check Failing (403) on Form Submit
http://link.bitbucket.org/wf/click?upn=8USRlNyft-2BCzk2l4Ywl6gBN6O2ZFCgViYAU6dOoIHIPp6EEjgcMf3vvydwpEVPBH11s-2FaHLV0NhKXZoC41HywKiEGExC0VBdlNGsOb8fnAk-2FdzUKXsqoh52xdZ2lME4mgIWyI5QXHHxN08dPyd2G4A-3D-3D_7V-2FmRl-2BatdmBwUBFXbsB13NVJlEXqBigXyxfn0HY8gb734ofWR-2Fbbq5jwybzy1EM2yWqNoXfUdUYJEqhio0-2FaeMXlMmU-2BAvAynylWHnI432Ya8gikTHZazBjhR7inLJw4EtmgZDV5ayts4kTDH4aRefFRmS9-2BaocHzVm8I5IBZsvjHyNJ7VHz86U6gYH43Yk-2Bi1B2WFMxNAew99q0h-2FXUelWcDak0-2FNVJ0wU-2FvgDU0c-3D

Rhys Llewellyn:

Hi,

I have changed to using Container Auth in order to provide SSO for my personal instance of Kallithea. However whilst the user logs in successfully, any form submit will result in a 403 Forbidden error. A check of the paster output shows a successful container authentication but a CRSF check failure. 

The container authentication is set up as specified on the Kallithea Docs.

I will update the issue with logs later this afternoon when I regain access to ssh.

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.sfconservancy.org/pipermail/kallithea-general/attachments/20160323/d8bfde54/attachment.html>