XSRF Security Token Missing when saving user notification settings

Question

We are running Bitbucket Server 7.6.2 behind nginx. Nginx is handling all the SSL stuff. We have been running this configuration for several years with different versions of Bitbucket Server and has never had any issues.

Just the other day a user found that when he saved the changes made on https://<bitbucket URL>/plugins/servlet/notification/settings he got XSRF Security Token Missing. I have tried as an administrator and as a normal user and get this every time I save the settings.

I found a KB on XSRF Security Token Missing, https://confluence.atlassian.com/bitbucketserverkb/xsrf-security-token-missing-779171343.html. I have looked through all 6 options. Option 2 could have been a problem as we had the secure=true in our configuration. But removing it changed nothing. We only see the problem with the above mentioned settings save.

Any ideas on what might be the problem and how to fix it?

Br
Henrik

henrik_gerdtsson · Answer

Hello Christian,

Yes I have. They are configured to the nginx-proxy.
server.secure=true
server.scheme=https
server.proxy-port=443
server.proxy-name=<bitbucket-url>

I have another Bitbucket server running apache where it works and the configuration in bitbucket.properties are the same.

Should I change anything?

Br
Henrik

Christian Glockner · Answer

Hi Henrik,

Do you have the server.proxy-name, server.scheme and server.proxy-port properties set in your bitbucket.properties file?

Cheers,

Christian

Premier Support Engineer

Atlassian