Skip to content

[BUG] ForbiddenError: Invalid CSRF token. Please refresh the page and try again. #3532

@Feldherren

Description

@Feldherren

Environment

🪟 Windows

System

Firefox 135

Version

1.12.12

Desktop Information

Node.js: 20.17.0
Branch: release

Describe the problem

I have gotten a 'ForbiddenError: Invalid CSRF token. Please refresh the page and try again.' error at least once a day since the latest update to the release branch. I only have SillyTavern open in a single tab in Firefox; it is not open in any other browser, nor is it open in a second tab.
It seems to happen after SillyTavern has been open for several hours, though I don't have an exact timeframe for when it occurs (late evening, my time?). The issue did not occur before the latest update to the release branch, and I have not changed anything about my setup (extensions, et cetera) since that update.

There is no indication that there has been a problem with the CSRF token until I attempt to send a message in SillyTavern; SillyTavern eats that message, loses it entirely, and immediately outputs 'ForbiddenError: Invalid CSRF token. Please refresh the page and try again.' to console whilst appearing to be generating a message in the frontend (ultimately doing nothing). SillyTavern's UI does not pop up an error itself that I've seen, and does not show any sign that it's non-functional at this point.
Because the issue is only evident on trying to send a message or interact with ST, it's kind of hard to pinpoint exactly when whatever is happening... happens. I tend to open ST early in the day and use it sporadically through the day, and haven't seen the issue earlier than the evening.

Additional info

No response

Please tick the boxes

  • I have explained the issue clearly, and I included all relevant info
  • I have checked that this issue hasn't already been raised
  • I have checked the docs important
  • I confirm that my issue is not related to third-party content, unofficial extension or patch. If in doubt, check with a new user account and with extensions disabled

Metadata

Metadata

Assignees

No one assigned

    Labels

    ✅ Done (staging)[ISSUE][🎯Auto-applied] The issue/feature is fixed or done and integrated on staging🐛 Bug[ISSUE] Ticket describing something that isn't working🪟 Windows[ISSUE] The Environment is on Windows

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions