invalid or missing CRSF token

Hello Team,

We are doing a OMRS implementataion and have recived the following errors:

/openmrs path: invalid or missing CRSF token.
/openmrs/spa path:
a: ResizeObserver loop completed with undelivered notifications.
b: Uncaught Error: WorkspaceOverlay or WorkspaceWindow has provided an invalid context key: "home". The context key must be part of the URL path, with no initial or trailing slash.

this was put into Git but no reply as of yet:

Any assistance would be great

Thanks - Olie

also getting a “Uncaught Error: WorkspaceOverlay or WorkspaceWindow has provided an invalid context key: “home”. The context key must be part of the URL path, with no initial or trailing slash.” when in the application

@ibacher @caseynth2 have the team had this happen sort of CRSF issue before? also is the Documentation that we are providing helpful? is GIT the right place? We are keen to contribute back where we can

@oliebolz Do you have the latest version
 of [custom messages](https://github.com/openmrs/openmrs-module-custommessage) module

may be it’s compatibility with platforms 2.6.0 which you’re using for your server is the issue.


pom.xml

seems to indicate it was built on 1.x

It probably needs some updates.

I tried building it on top of platform 1.10.0, 2.6.0 and 2.5.8 locally, with errors. some extra changes may be required, if there is no replacement.

Sorry @oliebolz this is not solving your issue at all but just wondering


Did OpenMRS spit out “CRSF token” somewhere in an error message? I’m asking because there’s a typo: “CRSF” → “CSRF”.

Actually yes, from the modules page as you try to start custom messages module.

@mksd @tendomart Sorry, team. That typo was mine. :face_with_diagonal_mouth: :bowing_man:The error message is “Invalid or Missing CSRF Token. Try Going Back and Refreshing the Page after clearing the Browser Cache.” It is not associated with the custom messages module. As Han’s GIT post explains, it happened with the initial set-up of the OMRS environment. any assistance with the CSRF Token would be great.

1 Like

would it be an option to disable the CSRF Token?