Unable to create user after AEM upgrade from 6.0 to 6.1

[anilkum]

Hi,

We are unable to create user after upgrading from AEM 6.0 SP2 to AEM 6.1 SP1

We are getting the following error:

POST /libs/granite/security/post/authorizables.html HTTP/1.1 com.adobe.granite.csrf.impl.CSRFFilter isValidRequest: empty CSRF token - rejecting

POST /libs/granite/security/post/authorizables.html HTTP/1.1 com.adobe.granite.csrf.impl.CSRFFilter doFilter: the provided CSRF token is invalid

POST /libs/granite/security/post/authorizables.html HTTP/1.1 com.day.cq.wcm.core.impl.components.ComponentCacheImpl No component node found at /libs/granite/security/post/authorizables.servlet

All the bundles are in active state.

Regards,

Anil

[vmehrotr]

If you are accessing via dispatcher 

following should be added to your author-farm.any on Dispatcher, under the /clientheaders section:

"CSRF-Token"

"Referer"

Without these, HTTP POST operations will fail.

https://docs.adobe.com/docs/en/dispatcher/security-checklist.html#par_title

[anilkum]

vmehrotr wrote...

If you are accessing via dispatcher 

following should be added to your author-farm.any on Dispatcher, under the /clientheaders section:

"CSRF-Token"

"Referer"

Without these, HTTP POST operations will fail.

https://docs.adobe.com/docs/en/dispatcher/security-checklist.html#par_title

I am trying to create users from AEM console.. so should it not be handled automatically?

[MaxBarrass]

see headers in "CSRF Request in Scripts" example in https://github.com/wildone/aem-links/blob/master/curl_cheatsheet.md