[
https://issues.apache.org/jira/browse/AIRFLOW-2866?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16747033#comment-16747033
]
ASF subversion and git services commented on AIRFLOW-2866:
----------------------------------------------------------
Commit 4ff82029fb2e4d1bfd7d3150b24f5cba26d84954 in airflow's branch
refs/heads/v1-10-test from Gabriel Silk
[ https://gitbox.apache.org/repos/asf?p=airflow.git;h=4ff8202 ]
[AIRFLOW-2866] Fix missing CSRF token head when using RBAC UI (#3804)
> Missing CSRF Token Error on Web RBAC UI Create/Update Operations
> ----------------------------------------------------------------
>
> Key: AIRFLOW-2866
> URL: https://issues.apache.org/jira/browse/AIRFLOW-2866
> Project: Apache Airflow
> Issue Type: Bug
> Components: webapp
> Affects Versions: 2.0.0
> Reporter: Jasper Kahn
> Priority: Major
> Fix For: 2.0.0
>
>
> Attempting to modify or delete many resources (such as Connections or Users)
> results in a 400 from the webserver:
> {quote}{{Bad Request}}
> {{The CSRF session token is missing.}}{quote}
> Logs report:
> {quote}{{[2018-08-07 18:45:15,771] \{csrf.py:251} INFO - The CSRF session
> token is missing.}}
> {{192.168.9.1 - - [07/Aug/2018:18:45:15 +0000] "POST
> /admin/connection/delete/ HTTP/1.1" 400 150
> "http://localhost:8081/admin/connection/"; "Mozilla/5.0 (X11; Linux x86_64)
> AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.84
> Safari/537.36"}}{quote}
> Chrome dev tools show the CSRF token is present in the request payload.
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
