havedill opened a new issue, #24717: URL: https://github.com/apache/superset/issues/24717
A clear and concise description of what the bug is. #### How to reproduce the bug Brand new installation, using TAG=3.0.0rc1 docker compose -f docker-compose-non-dev.yml up I have WTF_CSRF_ENABLED = False in superset/config.py When i try to log in as my user, i get no error page and the console logs the following: ``` superset_app | During handling of the above exception, another exception occurred: superset_app | superset_app | Traceback (most recent call last): superset_app | File "/usr/local/lib/python3.9/site-packages/flask/app.py", line 1821, in full_dispatch_request superset_app | rv = self.preprocess_request() superset_app | File "/usr/local/lib/python3.9/site-packages/flask/app.py", line 2313, in preprocess_request superset_app | rv = self.ensure_sync(before_func)() superset_app | File "/usr/local/lib/python3.9/site-packages/flask_wtf/csrf.py", line 229, in csrf_protect superset_app | self.protect() superset_app | File "/usr/local/lib/python3.9/site-packages/flask_wtf/csrf.py", line 264, in protect superset_app | self._error_response(e.args[0]) superset_app | File "/usr/local/lib/python3.9/site-packages/flask_wtf/csrf.py", line 307, in _error_response superset_app | raise CSRFError(reason) superset_app | flask_wtf.csrf.CSRFError: 400 Bad Request: The CSRF session token is missing. superset_app | 2023-07-17 15:56:53,862:WARNING:superset.views.base:Refresh CSRF token error superset_app | Traceback (most recent call last): superset_app | File "/usr/local/lib/python3.9/site-packages/flask_wtf/csrf.py", line 261, in protect superset_app | validate_csrf(self._get_csrf_token()) superset_app | File "/usr/local/lib/python3.9/site-packages/flask_wtf/csrf.py", line 103, in validate_csrf superset_app | raise ValidationError("The CSRF session token is missing.") superset_app | wtforms.validators.ValidationError: The CSRF session token is missing. superset_app | superset_app | During handling of the above exception, another exception occurred: superset_app | superset_app | Traceback (most recent call last): superset_app | File "/usr/local/lib/python3.9/site-packages/flask/app.py", line 1821, in full_dispatch_request superset_app | rv = self.preprocess_request() superset_app | File "/usr/local/lib/python3.9/site-packages/flask/app.py", line 2313, in preprocess_request superset_app | rv = self.ensure_sync(before_func)() superset_app | File "/usr/local/lib/python3.9/site-packages/flask_wtf/csrf.py", line 229, in csrf_protect superset_app | self.protect() superset_app | File "/usr/local/lib/python3.9/site-packages/flask_wtf/csrf.py", line 264, in protect superset_app | self._error_response(e.args[0]) superset_app | File "/usr/local/lib/python3.9/site-packages/flask_wtf/csrf.py", line 307, in _error_response superset_app | raise CSRFError(reason) superset_app | flask_wtf.csrf.CSRFError: 400 Bad Request: The CSRF session token is missing. ``` ### Expected results I would expect to be logged in ### Actual results Console simply logs an exception ### Environment (please complete the following information): Chrome, Windows 11 Client Almalinux 9 - Server/Docker host Superset 3.0.0RC1 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: notifications-unsubscr...@superset.apache.org.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org --------------------------------------------------------------------- To unsubscribe, e-mail: notifications-unsubscr...@superset.apache.org For additional commands, e-mail: notifications-h...@superset.apache.org