We're calling on all EU-based Mozillians with iOS or iPadOS devices to help us monitor Apple’s new browser choice screens. Join the effort to hold Big Tech to account!

Om de ûnderfining foar jo te ferbetterjen is tydlik de funksjonaliteit dan dizze website troch ûnderhâldswurk beheind. Wannear in artikel jo probleem net oplost en jo in fraach stelle wolle, kin ús stipemienskip jo helpe yn @FirefoxSupport op Twitter en /r/firefox op Reddit.

Avatar for Username

Sykje yn Support

Mij stipescams. Wy sille jo nea freegje in telefoannûmer te beljen, der in sms nei ta te stjoeren of persoanlike gegevens te dielen. Meld fertochte aktiviteit mei de opsje ‘Misbrûk melde’.

Mear ynfo

Dizze konversaasje is argivearre. Stel in nije fraach as jo help nedich hawwe.

'400 Bad CSRF Token' when I try to log in to Reddit

  • 5 antwurd
  • 1 hat dit probleem
  • 3 werjeftes
  • Lêste antwurd fan RandomTroll

RandomTroll
RandomTroll
more options

The last 2 days, when I've tried to log in to my account at reddit, it returns:

400 Bad CSRF Token

Access is denied. This server can not verify that your cross-site request forgery token belongs to your login session. Either you supplied the wrong cross-site request forgery token or your session no longer exists. This may be due to session timeout or because browser is not supplying the credentials required, as can happen when the browser has cookies turned off.

check_csrf_token(): Invalid token

I have a subreddit to moderate, so I'm using Opera for that. I'd rather use Firefox. It happens in safe mode too.

The last 2 days, when I've tried to log in to my account at reddit, it returns: 400 Bad CSRF Token Access is denied. This server can not verify that your cross-site request forgery token belongs to your login session. Either you supplied the wrong cross-site request forgery token or your session no longer exists. This may be due to session timeout or because browser is not supplying the credentials required, as can happen when the browser has cookies turned off. check_csrf_token(): Invalid token I have a subreddit to moderate, so I'm using Opera for that. I'd rather use Firefox. It happens in safe mode too.

Alle antwurden (5)

jonzn4SUSE
jonzn4SUSE
  • Top 10 Contributor
more options

Have you tried in safe mode and can you check to see if any 3rd party cookies are being blocked? see screenshot

RandomTroll
RandomTroll Fraacheigener
more options

As I wrote in my original message, it happens in safe mode too. Cookies are enabled anyway.

cor-el
cor-el
  • Moderator
  • Top 10 Contributor
more options

You can try these steps in case of issues with webpages:

You can reload webpage(s) and bypass the cache to refresh possibly outdated or corrupted files.

  • hold down the Shift key and left-click the Reload button
  • press "Ctrl + F5" or press "Ctrl + Shift + R" (Windows,Linux)
  • press "Command + Shift + R" (Mac)

Clear the Cache and remove the Cookies for websites that cause problems via the "3-bar" Firefox menu button (Options/Preferences).

"Remove the Cookies" for websites that cause problems:

  • Options/Preferences -> Privacy & Security
    Cookies and Site Data: "Manage Data"

"Clear the Cache":

  • Options/Preferences -> Privacy & Security
    Cookies and Site Data -> Clear Data -> Cached Web Content: Clear

Start Firefox in Safe Mode to check if one of the extensions ("3-bar" menu button or Tools -> Add-ons -> Extensions) or if hardware acceleration or userChrome.css is causing the problem.

  • switch to the DEFAULT theme: "3-bar" menu button or Tools -> Add-ons -> Themes
  • do NOT click the "Refresh Firefox" button on the Safe Mode start window
jonzn4SUSE
jonzn4SUSE
  • Top 10 Contributor
more options

How about that screenshot similar to mine?

RandomTroll
RandomTroll Fraacheigener
more options

I already reloaded, cleared the cache and history, tried in safe mode, have always used the default theme, accept all cookies - I tried all these BEFORE I asked here. I notice someone else @reddit has the same problem, though s/he/it doesn't specify browser. I notice the coincidence with decreased bandwidth. I can log in if I use old.reddit.com