CSRF verification failed. Request aborted.

[rezarazani]

Hi, I ran docker-compose with this configuration

version: '3'
services:
  weblate:
    ports:
      - 127.0.0.1:6372:8080
    environment:
      WEBLATE_SITE_DOMAIN: *******
      WEBLATE_ADMIN_NAME : reza
      WEBLATE_ADMIN_PASSWORD: *********
      WEBLATE_ADMIN_EMAIL: **********@gmail.com

But when I try to login or register, I get this error

Is there a problem with the configuration or is the problem somewhere else?

[github-actions]

This issue looks more like a support question than an issue. We strive to answer these reasonably fast, but purchasing the support subscription is not only more responsible and faster for your business but also makes Weblate stronger. In case your question is already answered, making a donation is the right way to say thank you!

[nijel]

See https://docs.djangoproject.com/en/3.2/ref/csrf/#how-it-works for documentation on CSRF protection.

[github-actions]

This issue has been automatically marked as stale because there wasn’t any recent activity.

It will be closed soon if no further action occurs.

Thank you for your contributions!

[gardenappl]

I'm getting the same error with Hosted Weblate when logging in via Firefox.

Tested in "safe mode" with all extensions disabled.

[nijel]

@gardenappl That is different error, you most likely have disabled sending referrer in Firefox, check https://wiki.mozilla.org/Security/Referrer

[gardenappl]

@gardenappl That is different error, you most likely have disabled sending referrer in Firefox, check https://wiki.mozilla.org/Security/Referrer

Right, it looks like one of my extensions changed that setting, thanks for pointing that out. Weird that Troubleshooting Mode didn't revert that setting to the default.

[github-actions]

This issue has been automatically marked as stale because there wasn’t any recent activity.

It will be closed soon if no further action occurs.

Thank you for your contributions!

[meunierd]

I followed the instructions here and am unable to login using my admin credentials. I can see that the login POST request passes the CSRF token. I see the django docs are linked above but I'm not really sure what information I should be using from there?

This is weblate 4.14.1.

[nijel]

@meunierd Most like it's unrelated, unless you get the same error. CSRF token is passed with every POST request.

[mzch]

I had the same issue. Adding CSRF_TRUSTED_ORIGINS to settings.py fixed it. Please add it to settings_example.py.