[ https://issues.apache.org/jira/browse/AIRFLOW-2866?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16576600#comment-16576600 ]
Craig Forster commented on AIRFLOW-2866: ---------------------------------------- I'm seeing this on master as well. > Missing CSRF Token Error on Web UI Create/Update Operations > ----------------------------------------------------------- > > Key: AIRFLOW-2866 > URL: https://issues.apache.org/jira/browse/AIRFLOW-2866 > Project: Apache Airflow > Issue Type: Bug > Components: webapp > Reporter: Jasper Kahn > Priority: Major > > Attempting to modify or delete many resources (such as Connections or Users) > results in a 400 from the webserver: > {quote}{{Bad Request}} > {{The CSRF session token is missing.}}{quote} > Logs report: > {quote}{{[2018-08-07 18:45:15,771] \{csrf.py:251} INFO - The CSRF session > token is missing.}} > {{192.168.9.1 - - [07/Aug/2018:18:45:15 +0000] "POST > /admin/connection/delete/ HTTP/1.1" 400 150 > "http://localhost:8081/admin/connection/" "Mozilla/5.0 (X11; Linux x86_64) > AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.84 > Safari/537.36"}}{quote} > Chrome dev tools show the CSRF token is present in the request payload. -- This message was sent by Atlassian JIRA (v7.6.3#76005)