[CONFSERVER-41672] Missing XSRF token when click on "authorise" from workbox - Create and track feature requests for Atlassian products.

Type: Bug
Resolution: Fixed
Priority: Medium
Fix Version/s: 5.9.12
Affects Version/s: 5.9.10, 5.9.11, 5.9.6, 5.9.7, 5.9.8, 5.10.0, 5.9.9
Component/s: Core - OSGi Plugins Platform
Labels:
- affects-server
- csrf
- loyalty
- team-core
- warranty
- xsrf

Support reference count:
7
Symptom Severity:
Severity 2 - Major
Bug Fix Policy:
View Atlassian Server bug fix policy

How to Replicate

Install Confluence 5.9.x
Install Jira 6.4.x
Link the applications (default is OAuth, but we did try Trusted apps with the same results)
@mention a user that is in both Jira and Confluence on a Jira issue
Click on the workbox notification in Confluence
Authorize and allow the connection

At this point you will be returned to Confluence, and the workbox, with the same authorization prompt

2016-05-12 16:37:56,075 WARN [http-nio-8080-exec-10] [common.security.jersey.XsrfResourceFilter] passesAllXsrfChecks XSRF checks failed for request: http://localhost:8080/confluence/rest/mywork/1/client/pong , origin: null , referrer: null
 -- url: /confluence/rest/mywork/1/client/pong | userName: admin

- - Sort By Name
  - Sort By Date
  - Ascending
  - Descending
  - Thumbnails
  - List

Screen_Shot_2016-06-09_at_14_46_44.png
284 kB
09/Jun/2016 5:01 AM

mentioned in: Page Failed to load

There are no comments yet on this issue.

Assignee:: Platon (Inactive)

Reporter:: Phong Hong Nguyen

Affected customers:: 1 This affects my team

Watchers:: 12 Start watching this issue

Created:: 12/May/2016 7:16 AM

Updated:: 11/Oct/2018 8:54 AM

Resolved:: 03/Jun/2016 2:16 AM