Skip to content

v1.6.8

Choose a tag to compare

View all tags
@BetaHydri BetaHydri released this 22 Jul 14:26
· 11 commits to main since this release
v1.6.8
97fb541

Fixed

  • Web UI provisioning form returned HTTP 403 (reason=csrf) on every resubmission after any form error (invalid computer name, wrong target prefix, or provisioning failure).

    Two root causes:

    • The error re-render rotated the anti-CSRF session token to a new value.
    • Set-PodeResponseStatus -Code <4xx> rendered Pode's built-in error page and marked the response as sent, so the re-rendered form (carrying the rotated token) was discarded and never reached the browser. The next submit then posted the stale token while the session held the rotated one, failing the CSRF check indefinitely.

    The token is now stable per session (no rotation on re-render), and every Set-PodeResponseStatus that precedes our own HTML now uses -NoErrorPage - so the form with its inline error message is what the browser receives, and corrected resubmissions succeed.

Deploy

Re-extract this release into your runtime folder (e.g. C:\Install\CrossForestOfflineJoin-main), then restart:

.\src\WebService\Start-OfflineJoinService.ps1 -ConfigPath .\src\WebService\appsettings.local.psd1
Assets 2
Loading