'400 Bad CSRF Token' when I try to log in to Reddit
The last 2 days, when I've tried to log in to my account at reddit, it returns:
400 Bad CSRF Token
Access is denied. This server can not verify that your cross-site request forgery token belongs to your login session. Either you supplied the wrong cross-site request forgery token or your session no longer exists. This may be due to session timeout or because browser is not supplying the credentials required, as can happen when the browser has cookies turned off.
check_csrf_token(): Invalid token
I have a subreddit to moderate, so I'm using Opera for that. I'd rather use Firefox. It happens in safe mode too.
All Replies (5)
Have you tried in safe mode and can you check to see if any 3rd party cookies are being blocked? see screenshot
As I wrote in my original message, it happens in safe mode too. Cookies are enabled anyway.
You can try these steps in case of issues with webpages:
You can reload webpage(s) and bypass the cache to refresh possibly outdated or corrupted files.
- hold down the Shift key and left-click the Reload button
- press "Ctrl + F5" or press "Ctrl + Shift + R" (Windows,Linux)
- press "Command + Shift + R" (Mac)
Clear the Cache and remove the Cookies for websites that cause problems via the "3-bar" Firefox menu button (Options/Preferences).
"Remove the Cookies" for websites that cause problems:
- Options/Preferences -> Privacy & Security
Cookies and Site Data: "Manage Data"
"Clear the Cache":
- Options/Preferences -> Privacy & Security
Cookies and Site Data -> Clear Data -> Cached Web Content: Clear
Start Firefox in Safe Mode to check if one of the extensions ("3-bar" menu button or Tools -> Add-ons -> Extensions) or if hardware acceleration or userChrome.css is causing the problem.
- switch to the DEFAULT theme: "3-bar" menu button or Tools -> Add-ons -> Themes
- do NOT click the "Refresh Firefox" button on the Safe Mode start window
How about that screenshot similar to mine?
I already reloaded, cleared the cache and history, tried in safe mode, have always used the default theme, accept all cookies - I tried all these BEFORE I asked here. I notice someone else @reddit has the same problem, though s/he/it doesn't specify browser. I notice the coincidence with decreased bandwidth. I can log in if I use old.reddit.com