search

psignoret / aad-sso-wordpress

Single Sign-on with Azure Active Directory (for WordPress)
Other
268 stars 79 forks source link

ANTIFORGERY_ID missmatch. Expected .... #271

Open meddie77 opened 3 days ago

meddie77 commented 3 days ago

Hello everyone, I am getting the message ANTIFORGERY_ID missmatch. Expected ..... when I try to log in to WordPress via Microsoft 365. The message appears as soon as I am redirected back to the WordPress page after entering my username and password on Microsoft. I found out that the error only occurs when the Belegungsplan from https://www.software-kunze.de/plugins/occupancy-plan/ plugin is activated. Once this plugin is deactivated, I can log in with the Office 365 account without any issues. Any ideas how to fix this? Thanks!

bradkovach commented 3 days ago

Due to some unique needs in a dockerized deployment, I needed the ability to configure the plugin at scale using environment variables, and without using PHP $_SESSION, so I forked the project and created an implementation that works across load balancers. Instead of using a random GUID, my fork uses built in wp nonces, so this might take care of your issue.

You are welcome to give it a try. There is a PR for it here, as it adds a lot of features that larger-scale SSO installations have. https://github.com/psignoret/aad-sso-wordpress/pull/263

On Thu, Oct 17, 2024 at 2:21 PM meddie77 @.***> wrote:

Hello everyone, I am getting the message ANTIFORGERY_ID missmatch. Expected ..... when I try to log in to WordPress via Microsoft 365. The message appears as soon as I am redirected back to the WordPress page after entering my username and password on Microsoft. I found out that the error only occurs when the Belegungsplan from https://www.software-kunze.de/plugins/occupancy-plan/ plugin is activated. Once this plugin is deactivated, I can log in with the Office 365 account without any issues. Any ideas how to fix this? Thanks!

— Reply to this email directly, view it on GitHub https://github.com/psignoret/aad-sso-wordpress/issues/271, or unsubscribe https://github.com/notifications/unsubscribe-auth/AAPS3WNTVOHHGTLEPCWSIYLZ4AL5LAVCNFSM6AAAAABQEQ4Y4WVHI2DSMVQWIX3LMV43ASLTON2WKOZSGU4TKNRWGYYTSNI . You are receiving this because you are subscribed to this thread.Message ID: @.***>

-- Brad Kovach