Uploaded image for project: 'Confluence Data Center'
  1. Confluence Data Center
  2. CONFSERVER-95894

Clicking "Create blog post" from "Blog posts" macro results in error

XMLWordPrintable

      Issue Summary

      This is reproducible on Data Center: yes

      Steps to Reproduce

      1. Create a test page and insert "Blog Post" macro >> Publish
      2. Under the macro "Blog stream" click on "Create blog post" button
      3. An error is thrown "Your request could not be processed because a required security token was not present in the request. You may need to re-submit the form or reload the page."

      Expected Results

      A blog post should be created without any error when clicking "Create blog post" from Blog post macro

      Actual Results

      When clicking "Create blog post" from Blog post macro an error appears:

      "Your request could not be processed because a required security token was not present in the request. You may need to re-submit the form or reload the page."

      Workaround

      Use the "Create" button from the top navigation bar to create a blog post instead

        1. blogpost.mov
          279 kB

          Form Name

            [CONFSERVER-95894] Clicking "Create blog post" from "Blog posts" macro results in error

            MabInternet001 added a comment -

            Confluence 9.x is also affected.

            A workaround, if using HAProxy, would be a rule to add the missing "=":

            acl is_createblogpost path_beg /pages/createblogpost.action
            http-request set-query %[query,regsub(&atl_token=?,&atl_token=,g)] if is_createblogpost

             

            MabInternet001 added a comment - Confluence 9.x is also affected. A workaround, if using HAProxy, would be a rule to add the missing "=": acl is_createblogpost path_beg /pages/createblogpost.action http-request set-query % [query,regsub(&atl_token=?,&atl_token=,g)] if is_createblogpost  

            Robin Powell added a comment -

            We have the same issue, DC 8.9.8. Missing the "=".

            Robin Powell added a comment - We have the same issue, DC 8.9.8. Missing the "=".

            Enrico Jr. Rongavilla added a comment -

            Hello we are also affected confluence DC 8.9.6

            Enrico Jr. Rongavilla added a comment - Hello we are also affected confluence DC 8.9.6

            Jessica Hicks added a comment -

            Hello,

            I am having this same issue. When I click to add a blog post the URL does not include the &alt_token at all.  If I add "&alt_token=......." to the end, then it allows me to add a new blog post. 

            This function used to work fine, does anyone know what has caused this?

            Thank you. 

            Jessica Hicks added a comment - Hello, I am having this same issue. When I click to add a blog post the URL does not include the &alt_token at all.  If I add "&alt_token=......." to the end, then it allows me to add a new blog post.  This function used to work fine, does anyone know what has caused this? Thank you. 

            Dennis Nickel added a comment - - edited

            Hi,

            we also have the same problem. The reason for this is apparently a new “atl_token”. This must be included in the URL!
            A “=” was forgotten in the standard scenario buttons for the blogs...

            Example action-URL when clicking on the button:
            https://.../pages/createblogpost.action?spaceKey=XXX&atl_tokene129a8b90671b5be58cff4d86afdbef130376973

            Correct would be:
            https://.../pages/createblogpost.action?spaceKey=XXX&atl_token=e129a8b90671b5be58cff4d86afdbef130376973

            Is there a way to deactivate the atl_token or to include it in the URL for your own links?

            Dennis Nickel added a comment - - edited Hi, we also have the same problem. The reason for this is apparently a new “atl_token”. This must be included in the URL! A “=” was forgotten in the standard scenario buttons for the blogs... Example action-URL when clicking on the button: https://.../pages/createblogpost.action?spaceKey=XXX&atl_tokene129a8b90671b5be58cff4d86afdbef130376973 Correct would be: https://.../pages/createblogpost.action?spaceKey=XXX&atl_token=e129a8b90671b5be58cff4d86afdbef130376973 Is there a way to deactivate the atl_token or to include it in the URL for your own links?

              Unassigned Unassigned
              mkurdi@atlassian.com Mohamed K
              Affected customers:
              14 This affects my team
              Watchers:
              16 Start watching this issue

                Created:
                Updated: