search

plone / plone.protect

HTTP protection utilities for the Plone CMS
https://pypi.org/project/plone.protect/
7 stars 8 forks source link

'Forbidden: Form authenticator is invalid' in creating the site in the Plone 4.3 #35

Closed idgserpro closed 8 years ago

idgserpro commented 8 years ago

If you use plone.protect 3.0.16 and doesn't use plone4.csrffixes, the error below occurs in creating of the Plone Site:

Traceback (most recent call last):
  File "/home/user/cache-python/eggs/plone.transformchain-1.0.4-py2.7.egg/plone/transformchain/transformer.py", line 48, in __call__
    newResult = handler.transformIterable(result, encoding)
  File "/home/user/cache-python/eggs/plone.protect-3.0.16-py2.7.egg/plone/protect/auto.py", line 158, in transformIterable
    if not self.check():
  File "/home/user/cache-python/eggs/plone.protect-3.0.16-py2.7.egg/plone/protect/auto.py", line 177, in check
    return self._check()
  File "/home/user/cache-python/eggs/plone.protect-3.0.16-py2.7.egg/plone/protect/auto.py", line 201, in _check
    check(self.request, manager=self.key_manager)
  File "/home/user/cache-python/eggs/plone.protect-3.0.16-py2.7.egg/plone/protect/authenticator.py", line 113, in check
    raise Forbidden('Form authenticator is invalid.')
Forbidden: Form authenticator is invalid.

This should not be documented?

gforcada commented 8 years ago

@idgserpro any good reason for not using plone4.csrffixes?

If you want to use plone.protect > 3.x on Plone 4.3 it's more than recommended

mauritsvanrees commented 8 years ago

I have added a Compatibility section in the readme and pushed a new release 3.0.17 to PyPI: https://pypi.python.org/pypi/plone.protect/3.0.17

idgserpro commented 8 years ago

@mauritsvanrees it was really just a note in the way I was thinking. Thanks!