Fresh installation on register or login: 419 Page Expired

[Strubbl]

Hi, i have a fresh installation of pixelfed. I am filling in the register form on /register. after sending the form i get the error 419 Page Expired. If i use the register form on the front page, the loading symbol runs forever on sending the form.

When i try to login with any credentials, there is also the same error.

how can i solve this?

[Strubbl]

This is my env:

APP_NAME="Pix"
APP_ENV=production
APP_KEY=asdf
APP_DEBUG=false
APP_URL=https://asdf

ADMIN_DOMAIN="asdf"
APP_DOMAIN="asdf"

LOG_CHANNEL=stack

DB_CONNECTION=pgsql
DB_HOST=172.17.0.1
DB_PORT=5432
DB_DATABASE=pixelfed
DB_USERNAME=pixelfed
DB_PASSWORD=asdf

BROADCAST_DRIVER=log
CACHE_DRIVER=redis
SESSION_DRIVER=redis
SESSION_LIFETIME=120
QUEUE_DRIVER=redis

REDIS_HOST=172.17.0.1
REDIS_PASSWORD=null
REDIS_PORT=6379

MAIL_DRIVER=log
MAIL_HOST=localhost
MAIL_PORT=25
MAIL_USERNAME=null
MAIL_PASSWORD=null
MAIL_ENCRYPTION=null
MAIL_FROM_ADDRESS="asdf"
MAIL_FROM_NAME="Pix"

SESSION_DOMAIN="${APP_DOMAIN}"
SESSION_SECURE_COOKIE=true
API_BASE="/api/1/"
API_SEARCH="/api/search"

OPEN_REGISTRATION=true
RECAPTCHA_ENABLED=false
ENFORCE_EMAIL_VERIFICATION=false

MAX_PHOTO_SIZE=15000
MAX_CAPTION_LENGTH=150
MAX_ALBUM_LENGTH=4

MIX_PUSHER_APP_KEY="${PUSHER_APP_KEY}"
MIX_PUSHER_APP_CLUSTER="${PUSHER_APP_CLUSTER}"
MIX_APP_URL="${APP_URL}"
MIX_API_BASE="${API_BASE}"
MIX_API_SEARCH="${API_SEARCH}"

ACTIVITYPUB_INBOX=true
ACTIVITYPUB_SHAREDINBOX=true
HORIZON_DARKMODE=true

# Set these both "true" to enable federation.
# You might need to also run:
#   php artisan cache:clear
#   php artisan optimize:clear
#   php artisan optimize
ACTIVITY_PUB=true
REMOTE_FOLLOW=true

[dansup]

Please run php artisan self-diagnosis and paste the result here.

[Strubbl]

I run pixelfed in a docker container. I already fixed the locales problem, which was mentioned by self-diagnosis.

I also added the following lines to contrib/docker/start.sh, but they did not work as expected.

gosu www-data:www-data php artisan config:cache
gosu www-data:www-data php artisan route:cache

The config and route is still not cached.

Please see the output from the command:

|-------------------------------------
| Common Checks
|-------------------------------------
Running check 1/11: App key is set...  ✔
Running check 2/11: The correct PHP version is installed...  ✔
Running check 3/11: The database can be accessed...  ✔
Running check 4/11: All directories have the correct permissions...  ✔
Running check 5/11: The environment file exists...  ✘
Running check 6/11: The example environment variables are set...  ✘
Running check 7/11: Required locales are installed...  ✔
Running check 8/11: Maintenance mode is not enabled...  ✔
Running check 9/11: The migrations are up to date...  ✔
Running check 10/11: The required PHP extensions are installed...  ✔
Running check 11/11: The storage directory is linked...  ✘

|-------------------------------------
| Environment Specific Checks (production)
|-------------------------------------
Running check 1/5: Composer dependencies (without dev) are up to date...  ✘
Running check 2/5: Configuration is cached...  ✘
Running check 3/5: Debug mode is not enabled...  ✔
Running check 4/5: Unwanted PHP extensions are disabled...  ✔
Running check 5/5: Routes are cached...  ✘

The following checks failed:
The .env file does not exist. Please copy your .env.example file as .env and adjust accordingly.

These environment variables are missing in your .env file, but are defined in your .env.example:
APP_NAME
APP_ENV
APP_KEY
APP_DEBUG
APP_URL
ADMIN_DOMAIN
APP_DOMAIN
LOG_CHANNEL
DB_CONNECTION
DB_HOST
DB_PORT
DB_DATABASE
DB_USERNAME
DB_PASSWORD
BROADCAST_DRIVER
CACHE_DRIVER
SESSION_DRIVER
SESSION_LIFETIME
QUEUE_DRIVER
REDIS_HOST
REDIS_PASSWORD
REDIS_PORT
MAIL_DRIVER
MAIL_HOST
MAIL_PORT
MAIL_USERNAME
MAIL_PASSWORD
MAIL_ENCRYPTION
MAIL_FROM_ADDRESS
MAIL_FROM_NAME
SESSION_DOMAIN
SESSION_SECURE_COOKIE
API_BASE
API_SEARCH
OPEN_REGISTRATION
RECAPTCHA_ENABLED
ENFORCE_EMAIL_VERIFICATION
MAX_PHOTO_SIZE
MAX_CAPTION_LENGTH
MAIL_FROM_ADDRESS
MAIL_FROM_NAME
SESSION_DOMAIN
SESSION_SECURE_COOKIE
API_BASE
API_SEARCH
OPEN_REGISTRATION
RECAPTCHA_ENABLED
ENFORCE_EMAIL_VERIFICATION
MAX_PHOTO_SIZE
MAX_CAPTION_LENGTH
MAX_ALBUM_LENGTH
MIX_PUSHER_APP_KEY
MIX_PUSHER_APP_CLUSTER
MIX_APP_URL
MIX_API_BASE
MIX_API_SEARCH
ACTIVITYPUB_INBOX
ACTIVITYPUB_SHAREDINBOX
HORIZON_DARKMODE
ACTIVITY_PUB
REMOTE_FOLLOW

The storage directory is not linked. Use "php artisan storage:link" to create a symbolic link.

Your composer dependencies are not up to date. Call "composer install" to update them. Do not run Composer as root/super user! See https://getcomposer.org/root for details
Loading composer repositories with package information
Installing dependencies from lock file
Package operations: 0 installs, 0 updates, 32 removals
  - Uninstalling webmozart/assert (1.4.0)
  - Uninstalling theseer/tokenizer (1.1.0)
  - Uninstalling sebastian/version (2.0.1)
  - Uninstalling sebastian/resource-operations (2.0.1)
  - Uninstalling sebastian/recursion-context (3.0.0)
  - Uninstalling sebastian/object-reflector (1.1.1)
  - Uninstalling sebastian/object-enumerator (3.0.3)
  - Uninstalling sebastian/global-state (2.0.0)
  - Uninstalling sebastian/exporter (3.1.0)
  - Uninstalling sebastian/environment (4.1.0)
  - Uninstalling sebastian/diff (3.0.2)
  - Uninstalling sebastian/comparator (3.0.2)
  - Uninstalling sebastian/code-unit-reverse-lookup (1.0.1)
  - Uninstalling phpunit/phpunit (7.5.7)
  - Uninstalling phpunit/php-token-stream (3.0.1)
  - Uninstalling phpunit/php-timer (2.1.1)
  - Uninstalling phpunit/php-text-template (1.2.1)
  - Uninstalling phpunit/php-file-iterator (2.0.2)
  - Uninstalling phpunit/php-code-coverage (6.1.4)
  - Uninstalling phpspec/prophecy (1.8.0)
  - Uninstalling phpdocumentor/type-resolver (0.4.0)
  - Uninstalling phpdocumentor/reflection-docblock (4.3.0)
  - Uninstalling phpdocumentor/reflection-common (1.0.1)
  - Uninstalling phar-io/version (2.0.1)
  - Uninstalling phar-io/manifest (1.0.3)
  - Uninstalling nunomaduro/collision (v2.1.1)
  - Uninstalling myclabs/deep-copy (1.8.1)
  - Uninstalling mockery/mockery (1.2.2)
  - Uninstalling hamcrest/hamcrest-php (v2.0.0)
  - Uninstalling fzaninotto/faker (v1.8.0)
  - Uninstalling filp/whoops (2.3.1)
  - Uninstalling doctrine/instantiator (1.1.0)

Your configuration should be cached in production for better performance. Call "php artisan config:cache" to create the configuration cache.

Your routes should be cached in production for better performance. Call "php artisan route:cache" to create the route cache.

[shleeable]

I've been seeing the same 419 error. I'll continue to investigate these on my dev box and hopefully get a step forward.

Could you drop your config for the reverse proxy? are you using nginx or traefik?

[shleeable]

@Strubbl I think I've resolved this issue - check your header/header to make sure the SESSION_DOMAIN is set correctly. PR pixelfed/pixelfed#1145 should fix some of our issues.

[shleeable]

This is resolved.

[mediaformat]

I had 419 | Expired but it was because I hadn't installed redis.