The Csrf Token Is Invalid. Please Try to Resubmit the Form

The CSRF token is invalid. Please try to resubmit the form

You need to add the _token in your form i.e

{{ form_row(form._token) }}

As of now your form is missing the CSRF token field. If you use the twig form functions to render your form like form(form) this will automatically render the CSRF token field for you, but your code shows you are rendering your form with raw HTML like <form></form>, so you have to manually render the field.

Or, simply add {{ form_rest(form) }} before the closing tag of the form.

According to docs

This renders all fields that have not yet been rendered for the given
form. It's a good idea to always have this somewhere inside your form
as it'll render hidden fields for you and make any fields you forgot
to render more obvious (since it'll render the field for you).

form_rest(view, variables)

API Rest The CSRF token is invalid. Please try to resubmit the form.

For an API you'll likely need to disable CSRF across the board, particularly if your API is processing data through forms directly (which I would recommend you do regardless).

You can find a clever solution for this here: https://stackoverflow.com/a/9888593/4620798

In your particular case, I think you may need to remove the csrf_token_id as it may be submitting a null value despite you telling the form to disable it anyway?

Separately, you'll probably end up running into PREFLIGHT issues if you're using Angular2 or any other "modern" frontend framework as the consumer. If/when you do there are solutions to that also :)

Symfony 3 - The CSRF token is invalid. Please try to resubmit the form

save_path:   "%kernel.root_dir%/../var/sessions/%kernel.environment%"

should be fine. Just make sure that your var/sessions folder exists and it is writable

mkdir -p var/sessions
chmod 755 var/sessions

The same must be true for var/cache and var/logs.

Error The CSRF token is invalid. Please try to resubmit the form in Symfony3

You should change this

<button type="submit" name="form_name">Create</button>

With this

<button type="submit" name="form_name[submit]">Create</button>

---

Related Topics