opensafely-core / opensafely-core/opencodelists
Following login, users may see a 403 error due to CSRF verification
Nobody has claimed this yet.
- Dominant language
- Python
- Stars
- 60
- Forks
- 16
- Avg merge
- 4d 12h
- Merged PRs (30d)
- 17
Description
…frequently when I login to OpenCodelists I get the following error. It does log me in, but I have to navigate back to the homepage.
https://bennettoxford.slack.com/archives/C01D7H9LYKB/p1709739999212329
The error is a 403 CSRF verification failed. Request aborted.
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by reproducing the login flow described in the issue and inspect the circumstances around the 403 CSRF verification failure. Use the linked Slack report and the existing issue comments as context, then define done as completing login without the CSRF error or requiring navigation back to the homepage.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- python
- Domain
- authentication, security
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 25/100