CSRF token is not valid

[nathanbowang]

Hi, when I click the APP icon in the board, it show me a login button. After select the developer team and click Add again, I got this error: CSRF token is not valid

[horeaporutiu]

Hi @natebowang

Sorry I missed this. I have put an automation in place to be notified of new issues on this repo, so should be able to respond much quicker now.

Were you seeing this error from one of the app-examples? or which app were you running when you saw this error? Any other details you can provide would be super helpful:

• was it using webSDK + REST API? Or only one or the other?

You can also try to clear the miro cookies and that sometimes will help the issue. For example I have a screenshot below which shows clearing the cookies from Chrome -> View -> Developer -> Developer Tools -> Application -> Storage -> Cookies -> https://miro.com -> Clear

Please let me know if that solved the issue!

[dncrews]

I'm not OP, but I came across this thread because I:

1. Ran npx create-miro-app@latest (next.js and TypeScript)
2. Installed my app in my developer team
3. Loaded the app in Miro
4. Clicked on the "Login" button in the app in Miro
5. Scroll inside the little panel (not a modal like the videos show, though "not matching the videos" is par for this particular course) so that I can choose the Team.
6. Click "Add"
7. Error

However, if instead I manually go to locahost:3000, and click the "Login" button there, the login flow works. I can then reload the app in Miro, and it will work (already logged in).

[horeaporutiu]

Thanks for sharing your particular solution @dncrews! Which particular video are you referring to which is not matching? Want to make sure I can take a look and update it if need be.

[mrobert09]

I am neither of the above two people but I can confirm I'm getting the same issue as they are. I followed the exact same steps as dncrews and I get the CSRF token is not valid error when attempting to go through the miro app on the miro website. However if I directly got to localhost:3000 the API works as expected.

Once I have logged in via localhost:3000, the app on the Miro board has me logged in and I can see all boards my user has access to.