Invalid Security Token

[AnthonyFromTheVault]

I'm getting a similar problem as #589

When I'm editing a page for too long and try to save, it sends me to the login page displaying the "Invalid Security Token" error message. I'm running a lightly modified version of the meteorite theme (primarily styling changes)

[rhukster]

What version of Grav, Admin plugin, Login plugin, and Form plugin are you running?

bin/gpm version

For the Grav version, and...

bin/gpm index -I

For the plugin versions...

[flaviocopes]

@AnthonyTR define "too long", how much time passed since you opened the page and when you save?

[AnthonyFromTheVault]

I've only experienced it within a few minutes of working on the page. No more than 5 or so minutes

On Mon, Feb 22, 2016 at 2:04 AM -0800, "Flavio Copes" notifications@github.com wrote:

@AnthonyTR define "too long", how much time passed since you opened the page and when you save?

—
Reply to this email directly or view it on GitHub.

[w00fz]

We are working on a JS Revamp which features a keep-alive implementation where this should not be happening anymore.

[rhukster]

In the meantime you might want to increase the session: timeout value in your system.yaml

[AnthonyFromTheVault]

As for the version numbers

Grav: 1.0.10

05. Login [ login ] [v1.3.0 ➜ v1.3.1] (installed) 06. Email [ email ] [v2.1.1 ➜ v2.2.0] (installed) 07. Admin Panel [ admin ] [v1.0.7 ➜ v1.0.9] (installed) 08. Form [ form ] [v1.2.0 ➜ v1.2.2] (installed)

And thanks for the recommendations, I'll make the adjustments and see if that helps!

[rhukster]

Yup, try a bin/gpm update to update your plugins

[rhukster]

I think this should be sorted, we've really not seen any invalid token reports in quite some time. Reopen if the issue persists.

[fourroses666]

• I have this message now too, after changing CHMOD 755 644 to 775 664.

[flaviocopes]

You got the problem after doing the chmod? Before, no issue?

[fourroses666]

got it before the chmod.
i just installed it on a subdomain, fresh install. first grav then admin.

[flaviocopes]

Not sure why you mentioned "after changing CHMOD 755 644 to 775 664" then, I thought you didn't have it before.

I could find this https://learn.getgrav.org/troubleshooting/common-problems#invalid-security-token-popup-in-admin in our learn site

[fourroses666]

Ah I now see, its missing some text I typed, sorry for that.

It makes me a bit sad when I do a clean install and get all kind of issues.
Everything works but these 2 messages; 'insecure token' and the 'fetch error' keep comming.
Even after changing CHMOD and clear cookies etc, OpenSSL and cURL are enabled etc.

[flaviocopes]

Which kind of setup are you on? Windows/Mac/Linux?

[flaviocopes]

Looks like a case that could be solved by this new addition to Grav #1053

[fourroses666]

iMac latest IOS, browser FF 49.0.1 and Chrome. Site isn't https. Host uses Linux shared.
Will try when ready.

[flaviocopes]

It's merged in the develop, if you want to test and report it's working, the more eyeballs on it, the better :)

[fourroses666]

Hmm, don't know what happened. Did a "develop" update by overwriting with FTP.
Don't see the Invalid Security Token message anymore.
But some others came along. Could be I didn't update it the correct way.
I'm a front-end developer..

Anyway here's a screeny:

---

The "funny" thing is I do get some "can't find page" messages, also with an other CMS in its manager. Don't know if its related to Grav but Grav seems to have it too.
As if its Grav causing the issues. Long time ago when I installed Grav for the first time I experienced it for the first time. Issues went away and are now back after testing / installing Grav again. Could be it has nothing to do with Grav at all.. Just saying what I'm experiencing.

[w00fz]

Did you turn off the new ssl verify peer setting? Also make sure you clear cache fully.

[fourroses666]

Cleared cache folder. Newsfeed came back up. Looks a lot better now but going to dashboard I still have an error;
"Fetch Failed: NetworkError when attempting to fetch resource."

Also these weird "page not found" issues are there allot. After saving a page for example. Then reload the page a couple of times and then it works again. Really weird.

ps. it was not translated yet (PLUGIN_ADMIN.GPM_VERIFY_PEER)
Trying the other one didn't solve that. (PLUGIN_ADMIN.GPM_VERIFY_PEER)