I'm having an issue with my publish instances returning an empty CSRF token for an anonymous user. If i log in as any other user, the CSRF token is good to go. I've checked the permissions on both publish instances and read permissions are in place for /libs/granite/csrf/token for both anonymous/everyone.
Any ideas?
Views
Replies
Total Likes
I am checking with internal Adobe ppl to see if this is a known issue.
Views
Replies
Total Likes
Thanks Scott. It's 6.1 with SP1 installed.
Views
Replies
Total Likes
Support responded:
CSRF token is not supported for anonymous users on the publish instance
Views
Replies
Total Likes
So, if i have a form that i'm trying to submit and it's getting a 403 because it's being submitted by an anonymous user because the CSRF token is invalid - that's expected? I can't believe that's the case.
Views
Replies
Total Likes
I am following up here.
Views
Replies
Total Likes
Hi,
I think what is meant here is that the CSRF check should only happen for authenticated users. For anonymous users, the check shouldn't be applied. Can you confirm you are getting the CSRF error in your logs on the publish instance for an anonymous user?
Regards,
Opkar
Views
Replies
Total Likes
i can confirm that is what is happening
Views
Replies
Total Likes
Views
Likes
Replies
Views
Likes
Replies