Issue Summary

Every now and then we are getting complaints from our users saying that they either cannot attach files to existing issues or that they are unable to create a certain issue after they have filled a certain amount of information in the Create Issue screen. Users complain this is unproductive. In both cases they see a message saying the security token was missing or was invalid.

We advise the users to refresh the page and that usually works for them, however this is not efficient. Please find below the comment of one of our users:

"Yes, the page recovers on a refresh, but I loose all the data I had entered on the page if I have to refresh. I commonly have to take more than an hour to get the data in a page collected(called into a meeting, need to grab screenshots from multiple tools in a lengthy process etc). Prior to expiring my token, the system should cache my data so I can pick it up and continue where i left off, or I should be warned my token is expiring. Or the system should not let me enter data if my token is expired. 

Steps to Reproduce

1. Login to Jira
2. Let the session be inactive until the session expires or redirect the user request to a different node.
3. Start filling a form in Jira, this can be any form which would be submitted to Jira, for example, creating an issue or updating comments.
4. Submit the form.

Expected Results

For the should retain the data in the form fields.

Actual Results

The below exception is thrown in the atlassian-jira.log file:

XSRF Security Token Missing

Workaround

Currently there is no known workaround for this behavior. A workaround will be added here when available