[Archivesspace_Users_Group] error on v2.2.0 PUI print PDF: InvalidAuthenticityToken

Tue Nov 7 15:21:50 EST 2017

I’m getting errors from the PUI in v2.2.0 when I try to print PDF on our production server. 

I’m not getting these errors from a slightly more recent build from master on our test server. 

Test server is running backend, frontend and production on the same hostname with different ports, while production server has different VHOSTS for frontend and public servers. ( I don’t know if that difference has anything to do with CSRF issues. )

Any ideas what might be the cause of this ? 

— Steve Majewski

Nov 07, 2017 2:56:35 PM org.eclipse.jetty.server.handler.ContextHandler$Context log
INFO: I, [2017-11-07T14:56:35.072013 #20432]  INFO -- : [98481e69-2a98-4cd5-80e9-4c24918997ed]   Parameters: {"utf8"=>"✓", "authenticity_token"=>"WgfLI5PYhgqZ6kkvyWBU6eRkt2zHVqZmUb6H2Mulat1aVBsjBH3fYkrIjvxg4urikTxcqEAyG+xbu12+fqfnaw==", "base_token"=>"07faf93c9544ae528e09f37817b3c16b", "token"=>"07faf93c9544ae528e09f37817b3c16b1510084595009", "rid"=>"3", "id"=>"11"}

Nov 07, 2017 2:56:35 PM org.eclipse.jetty.server.handler.ContextHandler$Context log
INFO: W, [2017-11-07T14:56:35.076137 #20432]  WARN -- : [98481e69-2a98-4cd5-80e9-4c24918997ed] Can't verify CSRF token authenticity.

Nov 07, 2017 2:56:35 PM org.eclipse.jetty.server.handler.ContextHandler$Context log
INFO: I, [2017-11-07T14:56:35.088476 #20432]  INFO -- : [98481e69-2a98-4cd5-80e9-4c24918997ed] Completed 422 Unprocessable Entity in 15ms

Nov 07, 2017 2:56:35 PM org.eclipse.jetty.server.handler.ContextHandler$Context log
INFO: F, [2017-11-07T14:56:35.100508 #20432] FATAL -- : [98481e69-2a98-4cd5-80e9-4c24918997ed]   

Nov 07, 2017 2:56:35 PM org.eclipse.jetty.server.handler.ContextHandler$Context log
INFO: F, [2017-11-07T14:56:35.102105 #20432] FATAL -- : [98481e69-2a98-4cd5-80e9-4c24918997ed] ActionController::InvalidAuthenticityToken (ActionController::InvalidAuthenticityToken):

Nov 07, 2017 2:56:35 PM org.eclipse.jetty.server.handler.ContextHandler$Context log
INFO: F, [2017-11-07T14:56:35.102620 #20432] FATAL -- : [98481e69-2a98-4cd5-80e9-4c24918997ed]   

Nov 07, 2017 2:56:35 PM org.eclipse.jetty.server.handler.ContextHandler$Context log
INFO: F, [2017-11-07T14:56:35.103492 #20432] FATAL -- : [98481e69-2a98-4cd5-80e9-4c24918997ed] actionpack (5.0.1) lib/action_controller/metal/request_forgery_protection.rb:195:in `handle_unverified_request'
[98481e69-2a98-4cd5-80e9-4c24918997ed] actionpack (5.0.1) lib/action_controller/metal/request_forgery_protection.rb:223:in `handle_unverified_request'
[98481e69-2a98-4cd5-80e9-4c24918997ed] actionpack (5.0.1) lib/action_controller/metal/request_forgery_protection.rb:218:in `verify_authenticity_token'
[98481e69-2a98-4cd5-80e9-4c24918997ed] activesupport (5.0.1) lib/active_support/callbacks.rb:382:in `block in make_lambda'
[98481e69-2a98-4cd5-80e9-4c24918997ed] activesupport (5.0.1) lib/active_support/callbacks.rb:169:in `block in halting'
[98481e69-2a98-4cd5-80e9-4c24918997ed] actionpack (5.0.1) lib/abstract_controller/callbacks.rb:12:in `block in Callbacks'
[98481e69-2a98-4cd5-80e9-4c24918997ed] activesupport (5.0.1) lib/active_support/callbacks.rb:170:in `block in halting'
[98481e69-2a98-4cd5-80e9-4c24918997ed] activesupport (5.0.1) lib/active_support/callbacks.rb:454:in `block in call'
[98481e69-2a98-4cd5-80e9-4c24918997ed] org/jruby/RubyArray.java:1734:in `each'
[98481e69-2a98-4cd5-80e9-4c24918997ed] activesupport (5.0.1) lib/active_support/callbacks.rb:454:in `call'
[98481e69-2a98-4cd5-80e9-4c24918997ed] activesupport (5.0.1) lib/active_support/callbacks.rb:101:in `__run_callbacks__'
[98481e69-2a98-4cd5-80e9-4c24918997ed] activesupport (5.0.1) lib/active_support/callbacks.rb:750:in `_run_process_action_callbacks'
[98481e69-2a98-4cd5-80e9-4c24918997ed] activesupport (5.0.1) lib/active_support/callbacks.rb:90:in `run_callbacks'
[98481e69-2a98-4cd5-80e9-4c24918997ed] actionpack (5.0.1) lib/abstract_controller/callbacks.rb:19:in `process_action'
[98481e69-2a98-4cd5-80e9-4c24918997ed] actionpack (5.0.1) lib/action_controller/metal/rescue.rb:20:in `process_action'
[98481e69-2a98-4cd5-80e9-4c24918997ed] actionpack (5.0.1) lib/action_controller/metal/instrumentation.rb:36:in `block in process_action'
[98481e69-2a98-4cd5-80e9-4c24918997ed] activesupport (5.0.1) lib/active_support/notifications.rb:164:in `block in instrument'
[98481e69-2a98-4cd5-80e9-4c24918997ed] activesupport (5.0.1) lib/active_support/notifications/instrumenter.rb:21:in `instrument'
[98481e69-2a98-4cd5-80e9-4c24918997ed] activesupport (5.0.1) lib/active_support/notifications.rb:164:in `instrument'
[98481e69-2a98-4cd5-80e9-4c24918997ed] actionpack (5.0.1) lib/action_controller/metal/instrumentation.rb:30:in `process_action'
[98481e69-2a98-4cd5-80e9-4c24918997ed] actionpack (5.0.1) lib/action_controller/metal/params_wrapper.rb:248:in `process_action'
[98481e69-2a98-4cd5-80e9-4c24918997ed] actionpack (5.0.1) lib/abstract_controller/base.rb:126:in `process'
[98481e69-2a98-4cd5-80e9-4c24918997ed] actionview (5.0.1) lib/action_view/rendering.rb:30:in `process'
[98481e69-2a98-4cd5-80e9-4c24918997ed] actionpack (5.0.1) lib/action_controller/metal.rb:190:in `dispatch'
[98481e69-2a98-4cd5-80e9-4c24918997ed] actionpack (5.0.1) lib/action_controller/metal.rb:262:in `dispatch'
[98481e69-2a98-4cd5-80e9-4c24918997ed] actionpack (5.0.1) lib/action_dispatch/routing/route_set.rb:50:in `dispatch'
[98481e69-2a98-4cd5-80e9-4c24918997ed] actionpack (5.0.1) lib/action_dispatch/routing/route_set.rb:32:in `serve'
[98481e69-2a98-4cd5-80e9-4c24918997ed] actionpack (5.0.1) lib/action_dispatch/journey/router.rb:39:in `block in serve'
[98481e69-2a98-4cd5-80e9-4c24918997ed] org/jruby/RubyArray.java:1734:in `each'
[98481e69-2a98-4cd5-80e9-4c24918997ed] actionpack (5.0.1) lib/action_dispatch/journey/router.rb:26:in `serve'
[98481e69-2a98-4cd5-80e9-4c24918997ed] actionpack (5.0.1) lib/action_dispatch/routing/route_set.rb:725:in `call'
[98481e69-2a98-4cd5-80e9-4c24918997ed] rack (2.0.1) lib/rack/etag.rb:25:in `call'
[98481e69-2a98-4cd5-80e9-4c24918997ed] rack (2.0.1) lib/rack/conditional_get.rb:38:in `call'
[98481e69-2a98-4cd5-80e9-4c24918997ed] rack (2.0.1) lib/rack/head.rb:12:in `call'
[98481e69-2a98-4cd5-80e9-4c24918997ed] rack (2.0.1) lib/rack/session/abstract/id.rb:222:in `context'
[98481e69-2a98-4cd5-80e9-4c24918997ed] rack (2.0.1) lib/rack/session/abstract/id.rb:216:in `call'
[98481e69-2a98-4cd5-80e9-4c24918997ed] actionpack (5.0.1) lib/action_dispatch/middleware/cookies.rb:613:in `call'
[98481e69-2a98-4cd5-80e9-4c24918997ed] actionpack (5.0.1) lib/action_dispatch/middleware/callbacks.rb:38:in `block in call'
[98481e69-2a98-4cd5-80e9-4c24918997ed] activesupport (5.0.1) lib/active_support/callbacks.rb:97:in `__run_callbacks__'
[98481e69-2a98-4cd5-80e9-4c24918997ed] activesupport (5.0.1) lib/active_support/callbacks.rb:750:in `_run_call_callbacks'
[98481e69-2a98-4cd5-80e9-4c24918997ed] activesupport (5.0.1) lib/active_support/callbacks.rb:90:in `run_callbacks'
[98481e69-2a98-4cd5-80e9-4c24918997ed] actionpack (5.0.1) lib/action_dispatch/middleware/callbacks.rb:36:in `call'
[98481e69-2a98-4cd5-80e9-4c24918997ed] actionpack (5.0.1) lib/action_dispatch/middleware/remote_ip.rb:79:in `call'
[98481e69-2a98-4cd5-80e9-4c24918997ed] actionpack (5.0.1) lib/action_dispatch/middleware/debug_exceptions.rb:49:in `call'
[98481e69-2a98-4cd5-80e9-4c24918997ed] actionpack (5.0.1) lib/action_dispatch/middleware/show_exceptions.rb:31:in `call'
[98481e69-2a98-4cd5-80e9-4c24918997ed] railties (5.0.1) lib/rails/rack/logger.rb:36:in `call_app'
[98481e69-2a98-4cd5-80e9-4c24918997ed] railties (5.0.1) lib/rails/rack/logger.rb:24:in `block in call'
[98481e69-2a98-4cd5-80e9-4c24918997ed] activesupport (5.0.1) lib/active_support/tagged_logging.rb:69:in `block in tagged'
[98481e69-2a98-4cd5-80e9-4c24918997ed] activesupport (5.0.1) lib/active_support/tagged_logging.rb:26:in `tagged'
[98481e69-2a98-4cd5-80e9-4c24918997ed] activesupport (5.0.1) lib/active_support/tagged_logging.rb:69:in `tagged'
[98481e69-2a98-4cd5-80e9-4c24918997ed] railties (5.0.1) lib/rails/rack/logger.rb:24:in `call'
[98481e69-2a98-4cd5-80e9-4c24918997ed] actionpack (5.0.1) lib/action_dispatch/middleware/request_id.rb:24:in `call'
[98481e69-2a98-4cd5-80e9-4c24918997ed] rack (2.0.1) lib/rack/method_override.rb:22:in `call'
[98481e69-2a98-4cd5-80e9-4c24918997ed] rack (2.0.1) lib/rack/runtime.rb:22:in `call'
[98481e69-2a98-4cd5-80e9-4c24918997ed] activesupport (5.0.1) lib/active_support/cache/strategy/local_cache_middleware.rb:28:in `call'
[98481e69-2a98-4cd5-80e9-4c24918997ed] actionpack (5.0.1) lib/action_dispatch/middleware/executor.rb:12:in `call'
[98481e69-2a98-4cd5-80e9-4c24918997ed] actionpack (5.0.1) lib/action_dispatch/middleware/static.rb:136:in `call'
[98481e69-2a98-4cd5-80e9-4c24918997ed] rack (2.0.1) lib/rack/sendfile.rb:111:in `call'
[98481e69-2a98-4cd5-80e9-4c24918997ed] railties (5.0.1) lib/rails/engine.rb:522:in `call'
[98481e69-2a98-4cd5-80e9-4c24918997ed] uri:classloader:/rack/handler/servlet.rb:22:in `call'

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lyralists.lyrasis.org/pipermail/archivesspace_users_group/attachments/20171107/895d31b3/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 4943 bytes
Desc: not available
URL: <http://lyralists.lyrasis.org/pipermail/archivesspace_users_group/attachments/20171107/895d31b3/attachment.bin>