mirror of
https://github.com/BookStackApp/BookStack.git
synced 2026-02-07 03:09:44 +03:00
419 Page Expired on Adroid Phone #4347
Reference in New Issue
Block a user
Delete Branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Originally created by @logicalasia on GitHub (Dec 3, 2023).
Attempted Debugging
Searched GitHub Issues
Describe the Scenario
When I login via Android Chrome with saved password, it point to page 419 Page Expired.
It is working fine on Computer Browser.
If I login with Chrome saved password, it show me 419 Page Expired. If I click back button, it brings me to default bookstack homepage (after login), which is correct result.
If I type the username and password manually everytime I login (in Android Chrome), it brings me to default bookstack homepage, which is correct result.
Tried to clear google save passwords, cache, cookies, and login in again same result happen.
I am using http://
Exact BookStack Version
BookStack v23.10.1
Log Content
No response
Hosting Environment
Installed in Synology Container
@ssddanbrown commented on GitHub (Dec 5, 2023):
Hi @logicalasia,
If you specifically open the login page, reload the page (using the browser refresh button) then auto-fill login, does the login work okay or is it the same result?
@logicalasia commented on GitHub (Dec 5, 2023):
Same Error
I tested in Chrome Normal and Incognito mode
@ssddanbrown commented on GitHub (Dec 5, 2023):
Okay, and is this reproducible on our demo site?
@logicalasia commented on GitHub (Dec 6, 2023):
Yes, after few tried, some errors happen.. I share you the screen recording..
the errors happen when i used "google saved password" to login. and it is working fine if I key in username and password manually.
https://github.com/BookStackApp/BookStack/assets/84135001/b1b0cb87-e4a1-4f65-956f-f79532ee0839
@ssddanbrown commented on GitHub (Dec 6, 2023):
Thanks for checking, and for the clear video demo.
It's strange, like it's maybe pre-filling the XSRF token.
I'll look to do some testing on my side to see if I can replicate also, and if so debug to see what's going on.
@jacac commented on GitHub (Jan 31, 2024):
We are also getting complains from some users seeing the 419 error code. If the device time is off by a few minutes could this result in a wrong XSRF token? The only think I could find is https://trycatchdebug.net/news/1098027/fix-debug-419-in-laravel-google-callback
I see in the access log
POST /oidc/login HTTP/1.1" 419 6628. But in Firefox I don't have POST request going to/oidc/login. Somehow in Safari for this client it is generation that POST request and could not find the reason.@ssddanbrown commented on GitHub (Sep 3, 2025):
Since this support request is quite old, I'm going to close this off.
If support is still required, please open a new support thread.
@TrackNew commented on GitHub (Nov 30, 2025):
I am experiencing issues of this kind in Safari 16 at macOS 11.7.9, too.