Please see attached picture. This same issue was reported to me yesterday and I thought the guy was just screwing something up. He ended up changing browsers and it worked so I blew it off. Now Spartan college is reporting the same issue on all their computers so I requested a picture.
In both instances this issue occurred on IE Version 11. When the user tried another browser (Chrome) it worked fine.
Basically what happens is the user types
prepware.com into the url in IE and this page pops up and does not allow the users to do anything. Clicking on the box with three lines in top right does nothing. No menu, not anything. Closing the browser and even clearing cookies or history didn’t appear to help either.
checked logs for this user:
Started POST "/sessions" for 64.207.244.178 at 2016-03-04 22:09:57 +0000
Processing by SessionsController#create as HTML
Parameters: {"utf8"=>"✓", "authenticity_token"=>"Ii6AJjsWejYXrkKsS0nqqeBUI3H5ylgycnxIx4gonF+bZpiSWP1eiDayJ8Dk8IWbokgSyjhxGTU3tUG2w3s93w==", "session"=>{"email"=>"trevoreli1318@gmail.com", "password"=>"[FILTERED]"}, "commit"=>"Sign In"}
Can't verify CSRF token authenticity
Rendered sessions/new.html.erb within layouts/application (2.4ms)
Rendered layouts/_shim.html.erb (0.0ms)
Rendered layouts/_masthead.html.erb (0.0ms)
Rendered layouts/_banner2.html.erb (0.2ms)
Rendered layouts/_navbar.html.erb (2.1ms)
Rendered layouts/_flash_messages.html.erb (0.1ms)
Rendered layouts/_footer.html.erb (0.1ms)
Completed 200 OK in 83ms (Views: 4.8ms | ActiveRecord: 2.9ms)
cookie-related?
http://stackoverflow.com/questions/28767059/does-rails-4-2-use-secret-token
http://guides.rubyonrails.org/upgrading_ruby_on_rails.html
https://github.com/plataformatec/devise/issues/2734
look at cookies in chrome:
chrome://settings/cookies
instead of doing this:
Use your existing secret_key_base from the secret_token.rb initializer to set the SECRET_KEY_BASE environment variable for whichever users running the Rails application in production mode. Alternatively, you can simply copy the existing secret_key_base from the secret_token.rb initializer to secrets.yml under the production section, replacing '<%= ENV["SECRET_KEY_BASE"] %>'.
i just created a new secret key for production
https://coderwall.com/p/8z7z3a/rails-4-solution-for-can-t-verify-csrf-token-authenticity-json-requests
I am using Rails 4.2.5 My authentication is home made based on M. Hartl tutorial. Everything worked well until yesterday. Today, after a bundle update I cannot get a session for user logging in. The error in the Puma server log is: "Can't verify CSRF token authenticity" I attempted all the suggestions above but none is working in my case. Any help to overcome this will be much appreciated.
_pws2013_session cookie (viewed in chrome)
Name: _pws2013_session
Content: BAh7B0kiD3Nlc3Npb25faWQGOgZFRkkiJWJkMzU1YTE2YmUyNzljZmNmNGQzY2E1NjQ3OWJkMDI5BjsAVEkiEF9jc3JmX3Rva2VuBjsARkkiMXA1VWpTcGw0dUc2dWJhZlBKSW1zaExTOXNXTkVKSzBpVGhvb0hEeXpjTms9BjsARg%3D%3D--1918eef9eb24855c8004b08fb39c960252d62b10
Domain: online.prepware.com
Path: /
Send for: Any kind of connection
Accessible to script: No (HttpOnly)
Created: Wednesday, March 2, 2016 at 2:47:02 PM
Expires: When the browsing session ends