csrf_token_mismatch error while hitting api/token

askvortsov

Can you post the output of your php flarum info command?

ravi99

Where is that file located?

I tried to execute it in /var/www/html/flarum

and getting error

require(): Failed opening required '/var/www/html/flarum/vendor/autoload.php in /var/www/html/flarum/site.php

askvortsov

Looks like a typo somehow got into your site.php file? I believeit should be autoload.php, not auutoload.php.

ravi99

askvortsov I followed exactly as described in https://flarum.org/docs/install.html

ravi99

I am sorry it's autoload only 🙂
Also what about https://github.com/flagrow/flarum-api-client#configuration

ravi99

I am trying to login user using api/token

{
"identification": "abcd",
"password": "abcd2020"
}

The error I am getting is

{
"errors": [
{
"status": "400",
"code": "csrf_token_mismatch"
}
]
}

luceos

Are you sure this is beta 13? Can you post the output of php flarum info?

And please, for our sanity, stop reposting the same question again and again 🙈

ravi99

It seems this is beta 12. But I just followed steps from installation page https://flarum.org/docs/install.html

Now how can I solve this one OR upgrade to beta 13.

How can I flag that duplicate one for delete.

ravi99

@luceos Okay so I have set it up on another machine. This time running php flarum info shows
everything as beta 13 except flarum-bbcode which is beta 12.

Still I am getting that same error.

PHP version - 7.4.5

The URL I am hitting is https://domain/api/token

Could you please let me know what am I doing wrong.

luceos

ravi99 can you share the output of php flarum info?

luceos

ravi99 The URL I am hitting is https://domain/api/token

Shouldn't this be https://domain/public/api/token

ravi99

@luceos Please find below the output

0.1.0-beta.13
PHP version: 7.4.5
Loaded extensions: Core, bcmath, calendar, ctype, date, filter, hash, iconv, json, SPL, pcre, readline, Reflection, session, standard, mysqlnd, tokenizer, zip, zlib, libxml, dom, PDO, bz2, SimpleXML, xml, xmlreader, xmlwriter, openssl, curl, fileinfo, gd, gettext, mbstring, exif, mysqli, pdo_mysql, pdo_sqlite, Phar, ftp

ravi99

I am getting 400 BAD Request.

ravi99

@luceos Oh my mistake. I am getting 400 BAD Request now with this.

{
    "identification": "abcd",
    "password": "abcd99"
}