website: Copy files during build. website: Allow for mixed env builds. website: Reduce build size. website: Expose build. website: Add build memory debugging. WIP: Disable broken links check to compare memory usage. website: Update deps. website: Clean up API paths. website: Flesh out 3.8 fixes. Format. website: Update ignore paths. Website: Clean up integrations build. website: Fix paths. website: Optimize remark. website: Update deps. website: Format. website: Remove linking. website: Fix paths. wip: Attempt API only build. Prep. Migrate render to runtime. Tidy sidebar. Clean up templates. docs: Move directory. WIP docs: Flesh out split. website: Fix issue where routes have collisions.
777 B
777 B
title
| title |
|---|
| Troubleshooting CSRF Errors |
With some proxy setups, you might run into CSRF errors when attempting to create/save objects in authentik. This is usually caused by either the Origin or Host header being incorrect.
Open the system info API endpoint of your authentik instance by going to https://authentik.company/api/v3/admin/system/. Take note of the value of HTTP_HOST, make sure it matches the domain you're accessing authentik at, and make sure it does not include any port numbers.
When submitting a POST request by updating/creating an object, open the browser's developer tools and check the Network tab. Open the POST request and look at the request headers. Make sure the value of Origin matches your authentik domain, without any ports.