mirror of
https://github.com/retspen/webvirtmgr.git
synced 2026-04-25 23:55:57 +03:00
[GH-ISSUE #672] CSRF and 403rd error #511
Loading…
Add table
Add a link
Reference in a new issue
No description provided.
Delete branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Originally created by @ivdok on GitHub (Oct 11, 2018).
Original GitHub issue: https://github.com/retspen/webvirtmgr/issues/672
My nginx.conf is uploaded here.
Developer tools show that I indeed receive crsftoken and sessionid cookies, but the reply from server always is "Forbidden (403) CSRF verification failed. Request aborted.", as if my browser doesn't accept cookies. Running server with
runserver 0:8000allows me to login, but it's obviously not a production solution. Definingdebug = Truein gunicorn.conf.py, surprisingly, didn't make WebVirtMgr spew more logs or make any sense. WTF? It did work on another testbox last week.@ivdok commented on GitHub (Oct 12, 2018):
For anybody else coming across this same error - it's related to nginx config error in wiki's template.
Find and replace string:
proxy_set_header Host $host:$server_port;With:
proxy_set_header Host $host;And with that, I'm closing the issue.