mozilla/browserid — Issue #398: Seeing token mismatch errors in the Beta browserid.log
Author: jbonacci
Created: 2011-10-11 04:45:26+00:00
State: open

Not sure if this is a big issue or not, but I do not remember seeing these warnings in previous Beta releases:
warn: CSRF validation failure: POST calls to /wsapi require an csrf token to be set
warn: CSRF validation failure, token mismatch. got:68b4941046637d27587e19db145ea4b7 want:undefined

Full run in the 10/10/2011 browserid.log:
...etc...
info: GET /ping.txt 200 1ms
info: GET /wsapi/have_email?email=eleselquees%40terra.es 200 3ms
info: GET / 200 5ms
warn: CSRF validation failure: POST calls to /wsapi require an csrf token to be set
warn: CSRF validation failure, token mismatch. got:68b4941046637d27587e19db145ea4b7 want:undefined
info: POST /wsapi/stage_user 200 2ms
info: GET / 200 5ms
info: GET /ping.txt 200 1ms
info: GET / 200 5ms
info: GET / 200 5ms
info: GET / 200 6ms
info: GET /css/browserid.min.css 304 2ms
info: GET /js/lib.min.js 304 1ms
debug: NEW csrf token created: bbfb62e3c540d5e8064f6c95448dfbc6
debug: user is not authenticated
info: GET /wsapi/session_context 200 2ms
info: GET /i/bg.png 304 1ms
info: GET /i/card.png 304 1ms
info: GET /i/hint.png 304 1ms
info: GET /i/blink.gif 304 1ms
info: GET /i/icon.png 304 1ms
info: GET /i/slit.png 304 1ms
info: GET /signup 200 6ms
info: GET /css/browserid.min.css 304 1ms
info: GET /js/lib.min.js 304 1ms
info: GET /ping.txt 200 1ms
info: GET / 200 6ms
info: GET / 200 5ms
debug: NEW csrf token created: c63df2b007293fc11bef9704b571fb7d
debug: user is not authenticated
info: GET /wsapi/session_context 200 2ms
info: GET /i/bg.png 304 1ms
info: GET /i/icon.png 304 1ms
info: GET /ping.txt 200 1ms
info: GET / 200 6ms
info: GET / 200 5ms
info: GET /ping.txt 200 2ms
info: GET / 200 5ms
info: GET / 200 7ms
info: GET /ping.txt 200 1ms
info: GET / 200 5ms
info: GET / 200 6ms
info: GET /wsapi/have_email?email=yosoyelquesoy82%40gmail.com 200 2ms
warn: CSRF validation failure: POST calls to /wsapi require an csrf token to be set
warn: CSRF validation failure, token mismatch. got:c63df2b007293fc11bef9704b571fb7d want:undefined
info: POST /wsapi/stage_user 200 2ms
info: GET /ping.txt 200 1ms
..etc..

The log:
-rw-r--r-- 1 www-data www-data 1016490 2011-10-10 21:44 browserid.log