InvalidAuthenticityToken

Was chalking this up to a bot or something but this is obviously a valid sign-in attempt. Should capture the crash and handle it accordingly. Not sure how they got in this weird state.

[COOLORWALK] user_sessions create (ActionController::InvalidAuthenticityToken) "ActionController::InvalidAuthenticityT... N     notifier info@rbocolorwalk.org Sun 8/4/2019 4:12 PM You 

An ActionController::InvalidAuthenticityToken occurred in user_sessions#create:

ActionController::InvalidAuthenticityToken

Request:

URL : http://www.rbocolorwalk.org/user_sessions
HTTP Method: POST
IP address : 207.118.120.244
Parameters : {"utf8"=>"✓", "authenticity_token"=>"2lO7cOyB7qw8CYW4d1X6d2FysKR97s+Q6axMaRX4WWRmS/VFwTfXe/7rQMAwOcF/QtwNbws9DiQUs2jryEiPkw==", "user_session"=>{"email"=>"chlochlomichelle2001@gmail.com", "password"=>"[FILTERED]"}, "commit"=>"Log In!", "controller"=>"user_sessions", "action"=>"create"}
Timestamp : 2019-08-04 23:12:02 UTC
Server : b819dac8-1274-4904-b642-2a177deeeebe
Rails root : /app
Process: 4

Session:

session id: "d3506761aaaa948a9cf6a9d8f04c4697"
data: {"session_id"=>"d3506761aaaa948a9cf6a9d8f04c4697",

"_csrf_token"=>"K3x+Is2eJ+BZaIiPOUYGzOI44rPcPLGB9eOIYFn1ux4="}

Environment:

CONTENT_LENGTH : 247
CONTENT_TYPE : application/x-www-form-urlencoded
GATEWAY_INTERFACE : CGI/1.2
HTTP_ACCEPT : text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8
HTTP_ACCEPT_ENCODING : gzip, deflate
HTTP_ACCEPT_LANGUAGE : en-us
HTTP_CONNECTION : close
HTTP_CONNECT_TIME : 1
HTTP_COOKIE : _ga=GA1.2.1755429959.1564682542; _gat_gtag_UA_122329164_1=1; _gid=GA1.2.1852062349.1564682542
HTTP_HOST : www.rbocolorwalk.org
HTTP_ORIGIN : http://www.rbocolorwalk.org
HTTP_REFERER : http://www.rbocolorwalk.org/sign_in
HTTP_TOTAL_ROUTE_TIME : 0
HTTP_UPGRADE_INSECURE_REQUESTS : 1
HTTP_USER_AGENT : Mozilla/5.0 (iPhone; CPU iPhone OS 12_3_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/12.1.1 Mobile/15E148 Safari/604.1
HTTP_VERSION : HTTP/1.1
HTTP_VIA : 1.1 vegur
HTTP_X_FORWARDED_FOR : 207.118.120.244
HTTP_X_FORWARDED_PORT : 80
HTTP_X_FORWARDED_PROTO : http
HTTP_X_REQUEST_ID : 6b1337d2-0579-4d5f-ad8d-f3a8b4c58d93
HTTP_X_REQUEST_START : 1564960322008
ORIGINAL_FULLPATH : /user_sessions
ORIGINAL_SCRIPT_NAME :
PATH_INFO : /user_sessions
QUERY_STRING :
REMOTE_ADDR : 10.67.241.187
REQUEST_METHOD : POST
REQUEST_PATH : /user_sessions
REQUEST_URI : /user_sessions
ROUTES_42170300_SCRIPT_NAME :
SCRIPT_NAME :
SERVER_NAME : www.rbocolorwalk.org
SERVER_PORT : 80
SERVER_PROTOCOL : HTTP/1.1
SERVER_SOFTWARE : puma 3.12.1 Llamas in Pajamas
action_controller.instance : #
action_dispatch.authenticated_encrypted_cookie_salt : authenticated encrypted cookie
action_dispatch.backtrace_cleaner : #
action_dispatch.content_security_policy :
action_dispatch.content_security_policy_nonce_generator:
action_dispatch.content_security_policy_report_only : false
action_dispatch.cookies : #
action_dispatch.cookies_digest :
action_dispatch.cookies_rotations : #
action_dispatch.cookies_serializer : json
action_dispatch.encrypted_cookie_cipher :
action_dispatch.encrypted_cookie_salt : encrypted cookie
action_dispatch.encrypted_signed_cookie_salt : signed encrypted cookie
action_dispatch.http_auth_salt : http authentication
action_dispatch.key_generator : #
action_dispatch.logger : #
action_dispatch.parameter_filter : [:password]
action_dispatch.redirect_filter : []
action_dispatch.remote_ip : 207.118.120.244
action_dispatch.request.content_type : application/x-www-form-urlencoded
action_dispatch.request.formats : [#<Mime::Type:0x000000000323e878 @synonyms=["application/xhtml+xml"], @symbol=:html, @string="text/html", @hash=-3278331665434792436>]
action_dispatch.request.parameters : {"utf8"=>"✓", "authenticity_token"=>"2lO7cOyB7qw8CYW4d1X6d2FysKR97s+Q6axMaRX4WWRmS/VFwTfXe/7rQMAwOcF/QtwNbws9DiQUs2jryEiPkw==", "user_session"=>{"email"=>"chlochlomichelle2001@gmail.com", "password"=>"[FILTERED]"}, "commit"=>"Log In!", "controller"=>"user_sessions", "action"=>"create"}
action_dispatch.request.path_parameters : {:controller=>"user_sessions", :action=>"create"}
action_dispatch.request.query_parameters : {}
action_dispatch.request.request_parameters : {"utf8"=>"✓", "authenticity_token"=>"2lO7cOyB7qw8CYW4d1X6d2FysKR97s+Q6axMaRX4WWRmS/VFwTfXe/7rQMAwOcF/QtwNbws9DiQUs2jryEiPkw==", "user_session"=>{"email"=>"chlochlomichelle2001@gmail.com", "password"=>"[FILTERED]"}, "commit"=>"Log In!"}
action_dispatch.request.unsigned_session_cookie : {"session_id"=>"d3506761aaaa948a9cf6a9d8f04c4697"}
action_dispatch.request_id : 6b1337d2-0579-4d5f-ad8d-f3a8b4c58d93
action_dispatch.routes : #
action_dispatch.secret_key_base : b8082f5f349ef65c227fa12c98afca79937ffdcec0278b43cd99fb99200755779c6b5be84c800a2779f5fa08c4118b1a281cbbaa1d9d4a10bae0c3d5af930bba
action_dispatch.secret_token :
action_dispatch.show_detailed_exceptions : false
action_dispatch.show_exceptions : true
action_dispatch.signed_cookie_digest :
action_dispatch.signed_cookie_salt : signed cookie
action_dispatch.use_authenticated_cookie_encryption : false
puma.config : #
puma.socket : #
rack.after_reply : []
rack.errors : #
rack.hijack : #
rack.hijack? : true
rack.input : #
rack.multiprocess : false
rack.multithread : true
rack.request.cookie_hash : {"_ga"=>"GA1.2.1755429959.1564682542", "_gat_gtag_UA_122329164_1"=>"1", "_gid"=>"GA1.2.1852062349.1564682542"}
rack.request.cookie_string : _ga=GA1.2.1755429959.1564682542; _gat_gtag_UA_122329164_1=1; _gid=GA1.2.1852062349.1564682542
rack.request.form_hash : {"utf8"=>"✓", "authenticity_token"=>"2lO7cOyB7qw8CYW4d1X6d2FysKR97s+Q6axMaRX4WWRmS/VFwTfXe/7rQMAwOcF/QtwNbws9DiQUs2jryEiPkw==", "user_session"=>{"email"=>"chlochlomichelle2001@gmail.com", "password"=>"[FILTERED]"}, "commit"=>"Log In!"}
rack.request.form_input : #
rack.request.form_vars : [FILTERED]
rack.request.query_hash : {}
rack.request.query_string :
rack.run_once : false
rack.session : #
rack.session.options : #
rack.tempfiles : []
rack.url_scheme : http
rack.version : [1, 3]

matt1018 / RBOColorWalk

InvalidAuthenticityToken #48