5034 ERROR_INVALID_FORMID and other errors with recaptcha enabled in chrome and some other browsers #711
Comments
|
If you try in a private browser does it work? Are you using a
load-balancer or proxy in front of PWM? If so try clearing cache or
restarting those services, and check if you get an error going directly to
PWM.
…On Wed, Feb 5, 2025 at 12:24 PM Alessandro Eredia ***@***.***> wrote:
Hi,
with version 2.0.6 and 2.0.7 i get this errore when i try to login to the
web app.
PWM 5034 The browser session is invalid or has expired. Please try again.
I tried different browser but i get same error
PWM is a docker container that until 2 days ago works like a charm but now
it generate this error.
From docker container logs i get this error:
2025-02-05T17:02:43Z, FATAL, servlet.AbstractPwmServlet, {0NOBX}
unexpected error: 5034 ERROR_INVALID_FORMID (form nonce missing)
2025-02-05T17:02:43Z, ERROR, http.PwmResponse, {0NOBX} 5034
ERROR_INVALID_FORMID (form nonce missing)
2025-02-05T17:02:44Z, FATAL, servlet.AbstractPwmServlet, {0NOBX}
unexpected error: 5034 ERROR_INVALID_FORMID (form nonce incorrect)
2025-02-05T17:02:44Z, ERROR, http.PwmResponse, {0NOBX} 5034
ERROR_INVALID_FORMID (form nonce incorrect)
—
Reply to this email directly, view it on GitHub
<#711>, or unsubscribe
<https://github.com/notifications/unsubscribe-auth/ACBPZFE5JHRKB5IUOOHUVKD2OJCNDAVCNFSM6AAAAABWRTPNVCVHI2DSMVQWIX3LMV43ASLTON2WKOZSHAZTGNJTHEYDMNY>
.
You are receiving this because you are subscribed to this thread.Message
ID: ***@***.***>
|
|
@jrivard 2025-02-06T15:38:11Z, FATAL, servlet.AbstractPwmServlet, {goOsN} unexpected error: 5034 ERROR_INVALID_FORMID (form nonce missing) [10.5.1.1]
|
|
@alessandroere @jrivard |
|
Hi, For @jjyoo38. I disabled Google Recaptcha and now it works but how can i undestand if the problem is google or PWM. Thank you |
|
@alessandroere |
|
Same issue flagged today. It was content security. |
|
I am having the same issue. It is PWM problem not a Google Captcha problem. Please also note that the Captcha V2 Invisible mode is also not working. No one can login to PWM when captcha is enabled on ANY form. We had to delete it on all which is a major security concern. 2025-02-07T18:51:06Z, FATAL, servlet.AbstractPwmServlet, {08fpr} unexpected error: 5034 ERROR_INVALID_FORMID (form nonce missing) [128.150.206.108] |
|
I'm not able to reproduce this on my 2.0.7 test system. Based on @poregan111 comment and some of my own research this may be a problem with the content-security-policy set by PWM and a change in recaptcha or browser update. Questions:
loaded client data |
|
|
Hi all, i'have the same issue, how can disable recaptcha? I have pwm 2.0.7 in .war |
|
@jjyoo38 Thanks for your help. However, I'm not able to read the screenshot well - I can only read english. I can't tell for sure if the console output is complete in that image. Can you please copy/paste the contents of the console window text. I'm specifically looking for any errors in the console that would help me diagnose/reproduce the issue. If there are no errors in edge do any of the other browsers show errors in the console output? |
|
@jrivard OK, i attached saved console log from chrome browser.(I changed my site name in the logs to blahblah.) ================================================================================ (anonymous) @ VM206:1 (anonymous) @ recaptcha__ko.js:1100 (anonymous) @ recaptcha__ko.js:1100 (anonymous) @ recaptcha__ko.js:1100 (anonymous) @ recaptcha__ko.js:1100 |
|
@Danilo587 |
|
@jjyoo38 Thank you so much! Yesterday, i have installed old version of firefox browser for reach the config page. Thanks you |
|
hi @Danilo587 can you explain how to clear CSP value? |
|
@alessandroere after login in /pwm/private path, you need to choose in the menù "More options", then "Configure Editor". Using your Configuration Password and in the Settings section, Security, Web Security. |
|
Thanks @Danilo587. I did it but i deleted the value from xml file configuration. On the GUI i can't leave that value empty |
|
Be advised, clearing the content security policy is a temporary workaround at best. Clearing the CSP value exposes PWM to potential security vulnerabilities. |
|
Thanks @jjyoo38 that was helpful. Can someone having this problem please test the following value for the content security policy setting? This adds the connect-src directive which may resolve the error. |
|
@jrivard that value works fine. thank you |
|
@jrivard it works. Thank you |
jrivard
changed the title
…a enabled in chrome and some other browsers
|
Resolved with commit a882efc |
Hi,
with version 2.0.6 and 2.0.7 i get this errore when i try to login to the web app.
PWM 5034 The browser session is invalid or has expired. Please try again.
I tried different browser but i get same error
PWM is a docker container that until 2 days ago works like a charm but now it generate this error.
From docker container logs i get this error:
2025-02-05T17:02:43Z, FATAL, servlet.AbstractPwmServlet, {0NOBX} unexpected error: 5034 ERROR_INVALID_FORMID (form nonce missing)
2025-02-05T17:02:43Z, ERROR, http.PwmResponse, {0NOBX} 5034 ERROR_INVALID_FORMID (form nonce missing)
2025-02-05T17:02:44Z, FATAL, servlet.AbstractPwmServlet, {0NOBX} unexpected error: 5034 ERROR_INVALID_FORMID (form nonce incorrect)
2025-02-05T17:02:44Z, ERROR, http.PwmResponse, {0NOBX} 5034 ERROR_INVALID_FORMID (form nonce incorrect)
The text was updated successfully, but these errors were encountered: