#CSRF errors since 2024.12.1

1 messages · Page 1 of 1 (latest)

dense pebble
#

Hi,

Since I have updated to 2024.12.1, I have countless CRSF errors when trying to add new providers or applications.

I have looked into dev tools > network and X-authentik-CSRF is empty indeed. But I never had this problem before.

My authentik is reverse proxied that way:

location / {
        etag off;
        set $backend1 "http://authentik-server:9000";
        proxy_pass $backend1;
        proxy_set_header Host $host;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-Proto $scheme;
        proxy_set_header X-Forwarded-Protocol $scheme;
        proxy_set_header X-Forwarded-Host $http_host;
        proxy_set_header X-Forwarded-Prefix "/";
        proxy_buffering on;
        proxy_http_version 1.1;
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection $connection_upgrade;
        proxy_connect_timeout 60s;
        proxy_read_timeout 60s;
        proxy_send_timeout 60s;

Any answer is welcome, have a nice day

#

CSRF errors since 2024.12.1