Invalid or missing CSRF token

[Slater91]

Hi, When I try logging in to ToDoist using Google account authentication I only get as far as a loading screen which says "invalid or missing CSRF token". Is there any way to get past this message and actually logging in to the service?

Here is the terminal output:

riccardo@Hades $ ./Todoist [7696:0708/141528:ERROR:browser_main_loop.cc(170)] Running without the SUID sandbox! See https://code.google.com/p/chromium/wiki/LinuxSUIDSandboxDevelopment for more information on developing with the sandbox on. [7696:0708/141528:ERROR:nss_util.cc(819)] After loading Root Certs, loaded==false: NSS error code: -8018 [7696:0708/141530:INFO:CONSOLE(46)] "The value "device-width;" for key "width" is invalid, and has been ignored.", source: https://todoist.com/Users/showLogin (46) [7696:0708/141530:INFO:CONSOLE(46)] "The value "0.9;" for key "initial-scale" was truncated to its numeric prefix.", source: https://todoist.com/Users/showLogin (46) [7696:0708/141530:INFO:CONSOLE(46)] "Error parsing a meta element's content: ';' is not a valid key-value pair separator. Please use ',' instead.", source: https://todoist.com/Users/showLogin (46) [7696:0708/141852:INFO:CONSOLE(46)] "The value "device-width;" for key "width" is invalid, and has been ignored.", source: https://todoist.com/Users/showLogin (46) [7696:0708/141852:INFO:CONSOLE(46)] "The value "0.9;" for key "initial-scale" was truncated to its numeric prefix.", source: https://todoist.com/Users/showLogin (46) [7696:0708/141852:INFO:CONSOLE(46)] "Error parsing a meta element's content: ';' is not a valid key-value pair separator. Please use ',' instead.", source: https://todoist.com/Users/showLogin (46)

Thanks!

[kamhix]

the problem might be linked to the cache. Can you try clear it. Go to -> '/home/$USER/.config/Todoist/' Delete or move 'Cache' and 'Application Cache' and reload the app.

Sorry for the inconvenience.

[Slater91]

Alas it is not related to cache as that was the first time I run the program. I tried to delete cache, but to no avail. Please let me know if you need any additional information.

[kamhix]

So I understand correctly, there's nothing in /home/$USER/.config/Todoist/ ?

[Slater91]

Yes, the directory is empty as it does not exist the first time the program is run.

[kunalgrover05]

Facing the same issue. Deleting the cache shows up the login screen for gmail but after entering credentials once, it always shows the error on subsequent login attempts.

[kunalgrover05]

I feel this is because you have hardcoded the CSRF in your code, shouldn't be this way right? EDIT: Doesn't seem so, it seems there is some issue in the way you are getting OpenID token, seems the authentication from Google has changed. On adding the CSRF to the URL the correct way, I seemed to get the response but the 2nd step needs to be fixed for OAuth.

[kenetik]

Hello, I'm also experiencing the same issue.

Screencapture: https://youtu.be/L3gwfV7I2JU

[kamhix]

Thanks @kunalgrover05 for the hint, it helped me a lot. you too @kenetik. Sorry for the late answer. I finally managed to fix the bug. It was of the RedirectToGoogle function I rewrite. Looks like Todoist updated function. So I removed it and the csrf missing bug is gone. Can you pull, try it and give me your feedback. Sorry again for the inconvenience.

[kenetik]

Yes! That fixed it, this issue is now resolved. Thanks you @kamhix

[kamhix]

you're welcome. I will update the download archives as soon as possible.

[matheusmota]

I'm experiencing the same problem on:

NAME="Ubuntu"
VERSION="19.04 (Disco Dingo)"
ID=ubuntu
ID_LIKE=debian
PRETTY_NAME="Ubuntu 19.04"
VERSION_ID="19.04"