Uploaded image for project: 'XWiki Platform'
  1. XWiki Platform
  2. XWIKI-20485

CSRFToken: Secret token verification failed, token: "null" when save very big article

    XMLWordPrintable

Details

    • Bug
    • Resolution: Unresolved
    • Major
    • None
    • 14.10.1
    • Edit
    • None
    • Unknown

    Description

      Save after edit very big article show message about "authorization problem" and write log message in catalina.out:
      2022-12-15 19:29:07,442 [ajp-nio-127.0.0.1-8009-exec-6 - http://MY-HOST-NAME/xwiki/bin/preview/VeryBigArticle/WebHome] WARN o.x.c.i.DefaultCSRFToken - CSRFToken: Secret token verification failed, token: "null", stored token: "FOK80v2TJtuvRnAkQuNAJA"

      Size of this article in plain-text in utf-8 is ~700KB. After reduce size to ~520KB it saved without errors.

      Our environments:
      CentOS 7.8.2003, kernel 3.10.0-1127 x86_64
      Tomcat 9.0.70 (tested on 8.5.84 too)
      PostgreSQL 15.1
      $ java -version
      openjdk version "11.0.6" 2020-01-14 LTS
      OpenJDK Runtime Environment 18.9 (build 11.0.6+10-LTS)
      OpenJDK 64-Bit Server VM 18.9 (build 11.0.6+10-LTS, mixed mode, sharing)

      Also tested with same result on:
      FreeBSD 13.1-p5 amd64
      Tomcat 9.0.70
      PostgreSQL 15.1
      $ java -version
      openjdk version "17.0.5" 2022-10-18
      OpenJDK Runtime Environment (build 17.0.5+8-1)
      OpenJDK 64-Bit Server VM (build 17.0.5+8-1, mixed mode, sharing)

      Found issue https://jira.xwiki.org/browse/XWIKI-19444, but we don't use short URLs. In any case, we checked all the suggested solutions, but nothing has changed.
      Look like this operation require POST multipart, but save action doesn't support it.

      Attachments

        Activity

          People

            Unassigned Unassigned
            VVD VVD
            Votes:
            1 Vote for this issue
            Watchers:
            3 Start watching this issue

            Dates

              Created:
              Updated: