Missing XSRF token

Is .15 available as a binary download or source only?

Where?

Found it.

Here: Releases · duplicati/duplicati · GitHub

1 Like

…BTW: Still getting it with .17 occasionally.

Yeah, so far things seem to be making it less common but not fully resolved.

For those that care, the XSRF token is Angular’s (used in the Duplicati web interface) implementation of the Cross-Site Request Forgery (CSRF) security feature described here:
https://stormpath.com/blog/angular-xsrf

So what’s going on is that somehow the Duplicati server isn’t getting the XSRF token and thinks the request from the web UI is fake so doesn’t give the UI whatever data was requested (often seen as empty select lists).

It’s strictly a communications issue between the Duplicati web UI and the Duplicati server (service / backend or tray-icon), in no way is it an issue with backups.

2 Likes

Sounds good. It’s just a pain to have to refresh each time is all. Glad to know it’s trivial.

Keep up the great work!

1 Like

Since this topic gets a lot of traffic, I want to mention that I believe I have found the cause for the XSRF error (bad cache settings) and I have fixed it, and it will be part of the next canary.

3 Likes

Any luck with this, still having it in chrome+firefox, strangely ie10 is working fine.

It should be resolved in new experimental and canaries.

What version are you using?

1 Like

Normal beta: 2.0.2.1_beta

When might this get pushed up the release chain?

Ah, okay, then you’re still affected for sure.

We just finished the 2.0.3 experimental Milestone · GitHub, but there isn’t a specific beta milestone yet, so I’m not sure exactly how long it would be.

There is a 2.0 stable Milestone · GitHub but it’s still quite a bit away judging from the current issues on that one.

@kenkendk, have you had any thoughts on a beta milestone? 2.0.4?

My plan is to promote the current experimental to a beta soon.

If we go for around march 30th, the experimental has been out for 2 weeks, which should have triggered unknown issues by then.

2 Likes

Excellent! It seems to be at a pretty good state right now and I’m sure it would drag out if we rebase it on the canary since it just got a lot of new untested features :slight_smile:

1 Like