Quantcast
Viewing all articles
Browse latest Browse all 6761

Websocket and CSRF Issues

Infos:

  • Used Zammad version: 6.3.1-1721886578.f7062be2.noble
  • Used Zammad installation type: package
  • Operating system: Ubuntu 24.04
  • Browser + version: Thorium (Chromium) 122.0.6261.132

Expected behavior:

  • Websockets connect and CSRF verification passes.

Actual behavior:

  • On loading a page, two error appear in the browser console.

WebSocket connection to ‘wss://example.domain.net/ws’ failed: application-b820e7570fbedd664bf2d3065c01e42b6a02bb13b21dce74504f0fe02289f54e.js:109

WebSocket connection to ‘wss://example.domain.net:6042/’ failed: application-b820e7570fbedd664bf2d3065c01e42b6a02bb13b21dce74504f0fe02289f54e.js:109

I checked the console and

I, [2024-07-26T04:15:14.443800#788-541180] INFO – : CSRF token verification failed
I, [2024-07-26T04:15:14.443932#788-541180] INFO – : CSRF token verification failed! (Exceptions::NotAuthorized)

appears every 10 minutes or so which I think might be related.

Steps to reproduce the behavior:

  • Install Zammad from apt
  • Disable included webservers
  • Install Caddy webserver
  • Use this Caddy configuration:
Caddyfile (click for more details)

I have changed {scheme} to https to no avail.

Thanks for any help!


Viewing all articles
Browse latest Browse all 6761

Trending Articles