Thu, 24 Sep 2026
Login

impact of disabling CSRF Guard

Confluence User - 13 Feb, 2020

hi,

i have a problem, when i get error 403, in logger it about csrf token not matching user session <Anonymous>, (user already login to joget)

my joget workflow application must fast, this error very annoying me,

thanks in advance

best regard

khafidz

csrf;403;usersession

2

Confluence User •
13 Feb, 2020 •
confluenceUser •
•
confluenceUser •

Try clear your browser cache, the close and reopen Chrome or any preferred browser.

Sometimes it is a reverse proxy issue where it was returning a wrong Referer header to Joget that triggered the CSRF protection. Do check your reverse proxy configuration.

Confluence User •
05 Apr, 2020 •
confluenceUser •
•
confluenceUser •

Do you have any example of reverse proxy configuration, because I found the same issue here.

1
CSV | Excel | XML | PDF
RELATED QUESTIONS
User activity tracker
Please how do i resolve access is forbidden for security reasons error? Security Violation (Code 403)
how to fix 403 error?
Running a process link from externel page get 403
Security Violation (Code 403) behind SSL load balance
json post from an external site
How to prevent Security Violation Error on Submission when the Form has not Fully Loaded.
Missing CSRF token after F5 HTTP redirection to HTTPS
where queryString is generated and appended to all service URL's?
NullPointerException in CustomDelegatingFilterProxy
1
CSV | Excel | XML | PDF

Your answer

To answer a question you'll need an account.

Print