topic Re: HTTP Status 403 - Invalid CSRF-token in Alfresco Archive

HTTP Status 403 - Invalid CSRF-token

gawadesk — Thu, 08 Dec 2016 13:56:13 GMT

While connecting to Activiti from ADF I am getting below error :Access to the specified resource has been forbidden.Invalid CSRF-tokenhttp://127.0.0.1:9090/activiti-app/app/authentication 403 (Forbidden)

Re: HTTP Status 403 - Invalid CSRF-token

mromano — Tue, 13 Dec 2016 16:05:18 GMT

Hi,

Did you try to switch off the csrf option (top left of the page)?

in case you tried can you share with us what you see in the console log of your browser?

Thank you,

Mario

Re: HTTP Status 403 - Invalid CSRF-token

ohej — Wed, 14 Dec 2016 12:17:40 GMT

We've identified this issue here: CSRF Token is not working · Issue #128 · Alfresco/alfresco-js-api · GitHub

A workaround is to disable CSRF in Activiti. Put this in your activiti-app.properties:

security.csrf.disabled=true‍

Let me know if this works.

Re: HTTP Status 403 - Invalid CSRF-token

jayesh_prajapat — Thu, 03 Jan 2019 09:09:48 GMT

Hi Ole Hejlskov‌
I am facing exact same issue with APS 1.8.1 and APW 1.3.1

Could you please suggest some check points?

Note: with workaround to disable CSRF, I could login.