XSRF check failed after pasting license key on 6.1.2.

[Guenter SolyMar]

Community hint on "base URL" already checked. See screenshot.

[AnnWorley · Accepted solution]

Hi Guenter,

Do you have a reverse proxy in front of Confluence? If so, please make sure the proxy support is included in the connector directive in the <Confluence_Install>/conf/server.xml file: Proxy Support

The proxyName and proxyPort attributes can be used when Tomcat is run behind a proxy server. These attributes modify the values returned to web applications that call the request.getServerName() and request.getServerPort() methods, which are often used to construct absolute URLs for redirects. Without configuring these attributes, the values returned would reflect the server name and port on which the connection from the proxy server was received, rather than the server name and port to whom the client directed the original request.

For example change:

 <Connector port="8090" connectionTimeout="20000" redirectPort="8443"
 maxThreads="48" minSpareThreads="10"
 enableLookups="false" acceptCount="10" debug="0" URIEncoding="UTF-8"
 protocol="org.apache.coyote.http11.Http11NioProtocol" />

to include the proxy settings:

<Connector port="8090" connectionTimeout="20000" redirectPort="8443"
maxThreads="48" minSpareThreads="10"
enableLookups="false" acceptCount="10" debug="0" URIEncoding="UTF-8"
protocol="org.apache.coyote.http11.Http11NioProtocol"

proxyName="docs.avisia.org"
proxyPort="443"
scheme="https" />

Please see Cross Site Request Forgery (CSRF) protection changes in Atlassian REST for descriptions of conditions that will trigger an XSRF error.

I look forward to hearing whether the server.xml changes help or if you are using a reverse proxy.

Thanks,

Ann

[Guenter SolyMar]

Hi Ann,

Thank you for your fast help and solving my issue.

Yes, I am using IIS as a proxy in front of Confluence and I only miss in the server.xml the proxy ‘scheme’ tag.
Thanks a lot for this!

Regards

Guenter.

[AnnWorley]

I am very happy to hear the issue is resolved! Thanks for the good news. :)