CSRF token mismatch upon form submission.

[Azoraqua]

Hello,

Today I wanted to do some things on my Pterodactyl installation then I noticed that I could not login due to a CSRF token mismatch that occured at any attempt of logging in (Or any form-based interaction).

Details:

• Panel Version: 1.1.3
• Daemon Version: 1.1.3

HTTP Response:

{
    "errors": [
        {
            "code": "HttpException",
            "status": "419",
            "detail": "CSRF token mismatch.",
            "source": {
                "line": 226,
                "file": "/vendor/laravel/framework/src/Illuminate/Foundation/Exceptions/Handler.php"
            },
            "meta": {
                "trace": [
                    "#0 /var/www/pterodactyl/vendor/laravel/framework/src/Illuminate/Foundation/Exceptions/Handler.php(198): Illuminate\\Foundation\\Exceptions\\Handler->prepareException()",
                    "#1 /var/www/pterodactyl/app/Exceptions/Handler.php(160): Illuminate\\Foundation\\Exceptions\\Handler->render()",
                    "#2 /var/www/pterodactyl/vendor/laravel/framework/src/Illuminate/Routing/Pipeline.php(51): Pterodactyl\\Exceptions\\Handler->render()",
                    "#3 /var/www/pterodactyl/vendor/laravel/framework/src/Illuminate/Pipeline/Pipeline.php(172): Illuminate\\Routing\\Pipeline->handleException()",
                    "#4 /var/www/pterodactyl/vendor/laravel/framework/src/Illuminate/Session/Middleware/AuthenticateSession.php(39): Illuminate\\Pipeline\\Pipeline->Illuminate\\Pipeline\\{closure}()",
                    "#5 /var/www/pterodactyl/vendor/laravel/framework/src/Illuminate/Pipeline/Pipeline.php(167): Illuminate\\Session\\Middleware\\AuthenticateSession->handle()",
                    "#6 /var/www/pterodactyl/vendor/laravel/framework/src/Illuminate/View/Middleware/ShareErrorsFromSession.php(49): Illuminate\\Pipeline\\Pipeline->Illuminate\\Pipeline\\{closure}()",
                    "#7 /var/www/pterodactyl/vendor/laravel/framework/src/Illuminate/Pipeline/Pipeline.php(167): Illuminate\\View\\Middleware\\ShareErrorsFromSession->handle()",
                    "#8 /var/www/pterodactyl/vendor/laravel/framework/src/Illuminate/Session/Middleware/StartSession.php(116): Illuminate\\Pipeline\\Pipeline->Illuminate\\Pipeline\\{closure}()",
                    "#9 /var/www/pterodactyl/vendor/laravel/framework/src/Illuminate/Session/Middleware/StartSession.php(62): Illuminate\\Session\\Middleware\\StartSession->handleStatefulRequest()",
                    "#10 /var/www/pterodactyl/vendor/laravel/framework/src/Illuminate/Pipeline/Pipeline.php(167): Illuminate\\Session\\Middleware\\StartSession->handle()",
                    "#11 /var/www/pterodactyl/vendor/laravel/framework/src/Illuminate/Cookie/Middleware/AddQueuedCookiesToResponse.php(37): Illuminate\\Pipeline\\Pipeline->Illuminate\\Pipeline\\{closure}()",
                    "#12 /var/www/pterodactyl/vendor/laravel/framework/src/Illuminate/Pipeline/Pipeline.php(167): Illuminate\\Cookie\\Middleware\\AddQueuedCookiesToResponse->handle()",
                    "#13 /var/www/pterodactyl/vendor/laravel/framework/src/Illuminate/Pipeline/Pipeline.php(103): Illuminate\\Pipeline\\Pipeline->Illuminate\\Pipeline\\{closure}()",
                    "#14 /var/www/pterodactyl/vendor/laravel/framework/src/Illuminate/Routing/Router.php(687): Illuminate\\Pipeline\\Pipeline->then()",
                    "#15 /var/www/pterodactyl/vendor/laravel/framework/src/Illuminate/Routing/Router.php(662): Illuminate\\Routing\\Router->runRouteWithinStack()",
                    "#16 /var/www/pterodactyl/vendor/laravel/framework/src/Illuminate/Routing/Router.php(628): Illuminate\\Routing\\Router->runRoute()",
                    "#17 /var/www/pterodactyl/vendor/laravel/framework/src/Illuminate/Routing/Router.php(617): Illuminate\\Routing\\Router->dispatchToRoute()",
                    "#18 /var/www/pterodactyl/vendor/laravel/framework/src/Illuminate/Foundation/Http/Kernel.php(165): Illuminate\\Routing\\Router->dispatch()",
                    "#19 /var/www/pterodactyl/vendor/laravel/framework/src/Illuminate/Pipeline/Pipeline.php(128): Illuminate\\Foundation\\Http\\Kernel->Illuminate\\Foundation\\Http\\{closure}()",
                    "#20 /var/www/pterodactyl/vendor/fideloper/proxy/src/TrustProxies.php(57): Illuminate\\Pipeline\\Pipeline->Illuminate\\Pipeline\\{closure}()",
                    "#21 /var/www/pterodactyl/vendor/laravel/framework/src/Illuminate/Pipeline/Pipeline.php(167): Fideloper\\Proxy\\TrustProxies->handle()",
                    "#22 /var/www/pterodactyl/vendor/laravel/framework/src/Illuminate/Foundation/Http/Middleware/TransformsRequest.php(21): Illuminate\\Pipeline\\Pipeline->Illuminate\\Pipeline\\{closure}()",
                    "#23 /var/www/pterodactyl/vendor/laravel/framework/src/Illuminate/Pipeline/Pipeline.php(167): Illuminate\\Foundation\\Http\\Middleware\\TransformsRequest->handle()",
                    "#24 /var/www/pterodactyl/vendor/laravel/framework/src/Illuminate/Foundation/Http/Middleware/TransformsRequest.php(21): Illuminate\\Pipeline\\Pipeline->Illuminate\\Pipeline\\{closure}()",
                    "#25 /var/www/pterodactyl/vendor/laravel/framework/src/Illuminate/Pipeline/Pipeline.php(167): Illuminate\\Foundation\\Http\\Middleware\\TransformsRequest->handle()",
                    "#26 /var/www/pterodactyl/vendor/laravel/framework/src/Illuminate/Foundation/Http/Middleware/ValidatePostSize.php(27): Illuminate\\Pipeline\\Pipeline->Illuminate\\Pipeline\\{closure}()",
                    "#27 /var/www/pterodactyl/vendor/laravel/framework/src/Illuminate/Pipeline/Pipeline.php(167): Illuminate\\Foundation\\Http\\Middleware\\ValidatePostSize->handle()",
                    "#28 /var/www/pterodactyl/vendor/laravel/framework/src/Illuminate/Cookie/Middleware/EncryptCookies.php(66): Illuminate\\Pipeline\\Pipeline->Illuminate\\Pipeline\\{closure}()",
                    "#29 /var/www/pterodactyl/vendor/laravel/framework/src/Illuminate/Pipeline/Pipeline.php(167): Illuminate\\Cookie\\Middleware\\EncryptCookies->handle()",
                    "#30 /var/www/pterodactyl/vendor/laravel/framework/src/Illuminate/Foundation/Http/Middleware/CheckForMaintenanceMode.php(63): Illuminate\\Pipeline\\Pipeline->Illuminate\\Pipeline\\{closure}()",
                    "#31 /var/www/pterodactyl/vendor/laravel/framework/src/Illuminate/Pipeline/Pipeline.php(167): Illuminate\\Foundation\\Http\\Middleware\\CheckForMaintenanceMode->handle()",
                    "#32 /var/www/pterodactyl/vendor/laravel/framework/src/Illuminate/Pipeline/Pipeline.php(103): Illuminate\\Pipeline\\Pipeline->Illuminate\\Pipeline\\{closure}()",
                    "#33 /var/www/pterodactyl/vendor/laravel/framework/src/Illuminate/Foundation/Http/Kernel.php(140): Illuminate\\Pipeline\\Pipeline->then()",
                    "#34 /var/www/pterodactyl/vendor/laravel/framework/src/Illuminate/Foundation/Http/Kernel.php(109): Illuminate\\Foundation\\Http\\Kernel->sendRequestThroughRouter()",
                    "#35 /var/www/pterodactyl/public/index.php(53): Illuminate\\Foundation\\Http\\Kernel->handle()",
                    "#36 {main}"
                ]
            }
        }
    ]
}

Demonstration of act:

[trenutoo]

Are you using Cloudflare proxy? If so, you'll have to create a page rule to bypass the page caching that Cloudflare performs

[Azoraqua]

No, I do not. I do use Cloudflare, but proxy-mode is disabled.

[DaneEveritt]

Did you refresh the page? This error is not normal, so if refreshing the page entirely doesn't fix it then there is likely something else stripping it out of the request or page body.

[DaneEveritt]

Is there a meta tag on the page with the value?

[Azoraqua]

Yes, there is.

[DaneEveritt]

I don't really have a good answer in that case, sorry. For whatever reason the contents of that tag are not being properly inserted into the HTTP request, but only on your specific install.

[Azoraqua]

Well, thank you for your time. Maybe I'll figure it out or others notice it too.
Regardless I might do a clean reinstall, maybe that will fix it.

Edit: A reinstall of the panel (No need to change any Nginx configuration) seemed to work.

[TekExplorer]

i would recommend putting the solution into its own reply and marked as an answer so that anyone in the future looking for a solution can try it

[Azoraqua]

I did not find the solution to my issue, however I did find a way to circumvent the issue which was to reinstall the entire panel again.
Just re-downloading the panel's files and reconfigure it seemed to fix it.

[BlackMalakDown]

Hey, I believe this error is the result if you initially trying to set up a SSL version.. This should delete your initial default or SSL config and replace it with the one you're currently trying to run
try:
rm /etc/nginx/sites-enabled/default
rm /etc/nginx/sites-enabled/pterodactyl.conf

and then:
ln -s /etc/nginx/sites-available/pterodactyl.conf /etc/nginx/sites-enabled/pterodactyl.conf