Unable to activate education plan due to missing CSRF token

[brigaccess]

Important Details

How are you running Sentry?

• On-Premise w/ Docker, version x.y.z

• Saas (sentry.io)

• Other, version x.y.z, [briefly describe your environment]

Description

When activating education plan with Github student pack, POST request that activates it fails with "CSRF Failed: CSRF token missing or incorrect."

Steps to Reproduce

1. Open https://sentry.io/for/education/
2. Go through the activation process to step 3 ("Activate plan" button)
3. Click the button

What you expected to happen

Academic plan activation.

Possible Solution

Probably send CSRF token in request body?

[BYK]

@evanpurkhiser could this be related to your recent work on forms?

[w0rng]

I have the same problem in Edge and FireFox browsers.

[evanpurkhiser]

Yes thank you for reporting this. It was difficult to test since I’m no longer a student 🙃

[evanpurkhiser]

This should be fixed now :)

[w0rng]

This should be fixed now :)

Yes, I don't get CSRF errors anymore. I started getting errors with code 400 Bad Request :)

The server sends a response to organization: ["this field is required."]

[zusorio]

@evanpurkhiser I still can't activate the pack.
Previously I got the error "Failed to activate education plan. Please try again." and now this happens whenever I try to activate the pack