Networking-Forums.com

General Category => Forum Lobby => Topic started by: icecream-guy on April 15, 2023, 07:27:15 AM

Title: Authentication Failed: csrf cookie is missing or invalid
Post by: icecream-guy on April 15, 2023, 07:27:15 AM
how to fix ?

I have a security service, Vivint, when I try to login and check my balance, I get Authentication Failed: csrf cookie is missing or invalid

I turned off ad blocker, script blocker, and permitted site cookies for this site in Chrome, still no good.
I have tried edge which worked in the past, pretty much default config, set to allow cookies for web site. no good.
i just downloaded Firefox, in default state was able to log into web site no issues.

I can resort to using Firefox, but would like to fix for Chrome/edge.  this issue will probably eventually affect Firefox too.
Thanks
 
Title: Re: Authentication Failed: csrf cookie is missing or invalid
Post by: deanwebb on April 15, 2023, 03:00:49 PM
It may be an issue on the Vivint side, since you did the thing in Chrome that should have allowed CSRF cookies.
Title: Re: Authentication Failed: csrf cookie is missing or invalid
Post by: Otanx on April 17, 2023, 10:31:03 AM
Try private browsing mode in Chrome, and see if that works. If so then try clearing cookies and cache in Chrome. We have one product that we have to do this after every upgrade. For some reason the cookies get invalidated, and won't regen until they are wiped.

-Otanx
Title: Re: Authentication Failed: csrf cookie is missing or invalid
Post by: icecream-guy on May 20, 2023, 08:54:05 AM
tried again today, none of the top 2 browsers  2 of which have undisturbed default configs, do not work, as well private browsing does not work either.

clearing cookies and cache. NL.
Title: Re: Authentication Failed: csrf cookie is missing or invalid
Post by: icecream-guy on May 20, 2023, 09:01:36 AM
must be the bookmark, when I go to the home page and click on login, it all works.  rather than going directly to the login page.
Title: Re: Authentication Failed: csrf cookie is missing or invalid
Post by: deanwebb on May 22, 2023, 09:52:04 AM
I've had odd stuff like that work for me, as well. My case was an old server that had broken TLS on its front page, but OK TLS on a side page. Go directly to the front page, no luck. Load the side page first, clear the self-signed cert error, get that to load, then the main page is good to go with a self-signed cert error.