Quick Links

CSRF Token missing running in docker

From:	"Barrington-Hughes, Alan" <Alan_Barrington-Hughes(at)PremierInc(dot)com>
To:	"pgadmin-support(at)postgresql(dot)org" <pgadmin-support(at)postgresql(dot)org>
Subject:	CSRF Token missing running in docker
Date:	2019-10-24 12:21:59
Message-ID:	BY5PR11MB4195F55B8B943AE56E8DC16CC76A0@BY5PR11MB4195.namprd11.prod.outlook.com
Views:	Raw Message \| Whole Thread \| Download mbox \| Resend email
Thread:
Lists:	pgadmin-support

Hi,

I am trying to setup an instance of pgagmin4 in our docker cluster. The container documentation was very helpful and got me up and running, however, I am consistently receiving an error whenever a dialog appears (add new server / view user roles for example) the Alert.js window tells me the CRSF token is missing and I get this from the logs:

During handling of the above exception, another exception occurred:

Traceback (most recent call last):
File "/usr/local/lib/python3.7/site-packages/flask/app.py", line 1811, in full_dispatch_request
rv = self.preprocess_request()
File "/usr/local/lib/python3.7/site-packages/flask/app.py", line 2087, in preprocess_request
rv = func()
File "/usr/local/lib/python3.7/site-packages/flask_wtf/csrf.py", line 221, in csrf_protect
self.protect()
File "/usr/local/lib/python3.7/site-packages/flask_wtf/csrf.py", line 252, in protect
self._error_response(e.args[0])
File "/usr/local/lib/python3.7/site-packages/flask_wtf/csrf.py", line 295, in _error_response
raise CSRFError(reason)
flask_wtf.csrf.CSRFError: 400 Bad Request: The CSRF session token is missing.
::ffff:10.255.52.89 - - [16/Oct/2019:19:46:06 +0000] "POST /settings/save_tree_state/ HTTP/1.1" 400 150 "https://dockeree.mycompany.com:52129/browser/"<https://urldefense.proofpoint.com/v2/url?u=https-3A__dockeree.mycompany.com-3A52129_browser_-2522&d=DwQGaQ&c=2Nw3fMGo2X8W9N0cgJ8QEE6dJUdSW43Zo0sycqQq3H0&r=JXlHlKf8Hjakso54E_rGKblOv3Fth6Zevxm0R26zlGKmuafRJMMVOJj3dLMEx0vS&m=i6QkRsgk7MTDpBooYsz0vmW32JsK7vyfWa_tvg52GCw&s=-qvQZKvekO07Wq-bzwPEryKkXPEe0GTLFJ2BSmWF6jg&e=> "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_6) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.2 Safari/605.1.15"
2019-10-16 19:46:13,214: ERROR flask.app<https://urldefense.proofpoint.com/v2/url?u=http-3A__flask.app&d=DwQGaQ&c=2Nw3fMGo2X8W9N0cgJ8QEE6dJUdSW43Zo0sycqQq3H0&r=JXlHlKf8Hjakso54E_rGKblOv3Fth6Zevxm0R26zlGKmuafRJMMVOJj3dLMEx0vS&m=i6QkRsgk7MTDpBooYsz0vmW32JsK7vyfWa_tvg52GCw&s=t4K7_X_RwomwwBr4SLlc6aGVxbD9E1oB3RqRUr0cGrQ&e=>: 400 Bad Request: The CSRF session token is missing.
Traceback (most recent call last):
File "/usr/local/lib/python3.7/site-packages/flask_wtf/csrf.py", line 249, in protect
validate_csrf(self._get_csrf_token())
File "/usr/local/lib/python3.7/site-packages/flask_wtf/csrf.py", line 87, in validate_csrf
raise ValidationError('The CSRF session token is missing.')
wtforms.validators.ValidationError: The CSRF session token is missing.

During handling of the above exception, another exception occurred:

I am uncertain as to what configuration I should be setting to make this error go away.

I am running:
Version
4.13
Python Version
3.7.4 (default, Aug 21 2019, 00:19:59) [GCC 8.3.0]
Flask Version
1.0.2
Application Mode
Server

running with env:
"PGADMIN_DEFAULT_EMAIL=alan_barrington-hughes(at)premierinc(dot)com",
"PGADMIN_DEFAULT_PASSWORD=SuperSecret",
"PGADMIN_ENABLE_TLS=YES",

volume for /var/lib/pgadmin and secrets for the tls certs are also attached.

Many thanks in advance, Alan

Browse pgadmin-support by date

	From	Date	Subject
Next Message	Arni Kromić	2019-10-25 07:01:57	Re: Session timeout
Previous Message	Pradip pariyar	2019-10-24 06:37:32	Suuport for installation