Recurrent "CSRF: Invalid or missing CSRF token" error

Omeka S
1

Hello,

With increasing frequency and no discernible pattern, we have been encountering the error “CSRF: Invalid or missing CSRF token” when trying to save changes to an item. As others have reported, we lose the intended changes and have to reconstruct them every time it happens. Usually it gets worse towards the end of the working day. We have tried all sorts of solutions: using a private browser window, being disciplined about not working in multiple tabs, increasing the session timeout settings, clearing cookies. It happens when we have been working continuously, so it’s not being caused by long idle periods. Does anyone have any ideas about what to try next?

Thanks in advance.

2

This error will happen when the user leaves the form open longer than the CSRF token expiration. But you say it’s not being caused by long idle periods. What version of Omeka S are you using? In version 4.1.0 we bumped the token expiration from 1 hour to 12 hours.