![[DigitalPoint] App for Cloudflare®](/community/data/resource_icons/8/8750.jpg?1692633961){kind=icon}
[DigitalPoint] App for Cloudflare® 1.9.1.1
- Thread starter digitalpoint
- Start date
D
Deleted member 184953
Guest
Disabling Cache pages for guests remove the error.
digitalpoint
Well-known member
Ya, I'm seeing that now (I don't use the cookie consent anywhere). It looks like particular link works differently than all other requests in XenForo (probably because it has to do with cookie consent, so it's not assuming the user has support for cookies). I guess for the time being, disable the cache. Going to see if there's a way around it on this end.
CedricV
Well-known member
[DigitalPoint] Cloudflare
turns out it did get enabled! (not yet ready to pay 20 dollars to get this issue investigated by them lol) i suppose the only way to find out if it's working is to wait for new content and then load pages that should show those updated posts?
xenforo.com
My reply is being overlooked.
D
Deleted member 184953
Guest
Update to the latest version: 1.5.0.1
digitalpoint
Well-known member
Ya, everything there looks normal (the DevTools stuff). max-age=1 is telling your browser not to keep the page in it's local cache for more than 1 second, and if an actual underlying request goes out to Cloudflare to fetch it, that request is going to have the xf_user cookie, so Cloudflare shouldn't serve you a cached version there either.Here is a screenshot showing the entire requests from login to error, including the keep-alive response that even shows my user id
View attachment 279879
Network tab cleared, page reloaded
View attachment 279880
Not really sure what's going on (I haven't been able to replicate it yet on my end).
digitalpoint
Well-known member
Correct... the 1.5.0.1 version fixes it for accounts that have never done anything with Cache Rules.
You are on the right track, keep investigating
Chromaniac
Well-known member
so i am not seeing any issues with the older cookie banner (i am on an old xenforo build). but it is definitely fun logging in and out. i end up seeing guest view after logging in and logged in view after logging out especially on the homepage. 
digitalpoint
Well-known member
Well until I can replicate it, not sure if I can fix it. Are you doing anything non-standard somehow (like not sending cookies with your request)?You are on the right track, keep investigating
digitalpoint
Well-known member
What browser/version/operating system are you using? I'll keep trying to replicate it, but so far nada.
digitalpoint
Well-known member
Do you have all the necessary permissions for your API Token? There should be 14 (should correspond to what it shows in XF Admin -> Options -> External service providers under
Cloudflare authentication.My guess is your token is missing the permissions related to Access.
digitalpoint
Well-known member
Do you have a different cache/proxy you are going through by chance? Maybe a proxy through your upstream ISP that isn't doing what it's supposed to be doing with Cache-Control headers somehow? Honestly not sure at this point.
I've not been able to get it to happen on the latest versions of Chrome, Safari, Firefox on macOS, iOS or Linux. I haven't dug up the Windows machine yet, but I doubt it's going to be something Windows-specific.
D
Deleted member 184953
Guest
Just register to your site I/O labs, i can't log out.
I had the same message as @Kirby the user has changed...
And now if i click on my username i have this error and the menu doesn't open.
No, no other proxy is invloved.
Correct, its' not Windows-specific - it happens with any browser (at least I think so, I haven't actually tested this or looked at your code).
digitalpoint
Well-known member
So ya... from the looks of it, XenForo is doing csrf tokens different for a few URLs in the
misc route. From the bit I skimmed, it's the new cookie consent thing and also language/style selectors. And XenForo's own internal function to update csrf tokens don't get applied in those cases.I'm on the fence if it's a XenForo bug or not... because like I said, XenForo's own system for updating csrf tokens is not updating them in those places for some reason.
D
Deleted member 184953
Guest
I'm still logged in this page https://iolabs.io/
But i'm logged out to all others pages...
But i'm logged out to all others pages...
