Roundcube Community Forum

Release Support => Pending Issues => Topic started by: laotse on September 08, 2019, 05:59:42 PM

Title: No mails fetched and CSRF prohibits logout
Post by: laotse on September 08, 2019, 05:59:42 PM
I just did a fresh install of roundcube 1.3.10 under Debian 10.1 using nginx, PHP 7.3.4. From the installer I could send a test email and imap login worked fine. I did a first login using my IMAP credentials and it worked fine. RC fetches all folders from my dovecot, but it doesn't fetch any mail. I checked using $config['imap_debug'] = true;, and I could verify that no mail is ever attempted to be fetched. Of course there are mails - I see them in Thunderbird, Nextcloud, Horde, ...

Trying to log out failed due to CSRF. Well, it requires human interaction ... I could not yet figure out which, and according to what I found on the web it seems stange that this error pops up at logout.

As it seems the issue is different from another recent post even if the view is probably similar. But I did not have any issues in the installer.

Thanks for your help,
- lars.
Title: Re: No mails fetched and CSRF prohibits logout
Post by: SKaero on September 09, 2019, 09:22:54 AM
What specifically is the error?
Title: Re: No mails fetched and CSRF prohibits logout
Post by: laotse on September 09, 2019, 03:12:16 PM
The error during logout is (German):

ANFORDERUNGSPRÜFUNG FEHLGESCHLAGEN

Zu Ihrer Sicherheit wird der Zugriff auf diese Ressource mit CSRF geschützt.
Wenn Sie dies sehen, haben Sie sich wahrscheinlich vor dem Verlassen der Webanwendung nicht abgemeldet.

Nun ist eine menschliche Interaktion erforderlich, um fortzusetzen.
Bitte kontaktieren Sie Ihren Server-Administrator.


which translates to about:

Verification of request failed

For your security the acces to this resource is secured by CSRF.
If you see this, you probably did not log out before leaving the application.

Now a human interaction is required to continue.
Please contact your server administrator.


As mentioned above, I receive this when clicking log-out!
Title: [SOLVED] No mails fetched and CSRF prohibits logout
Post by: laotse on September 09, 2019, 03:37:40 PM
Thanks to the similar issue https://www.roundcubeforum.net/index.php/topic,28514.0.html (https://www.roundcubeforum.net/index.php/topic,28514.0.html) I checked the javascript console and it turned out that jQuery was missing. After installing the latest jQuery into /program/js I now see my mails and log out works fine.

Thanks for the inspirations,
- lars.
Title: Re: No mails fetched and CSRF prohibits logout
Post by: mjcc on September 21, 2024, 03:41:01 PM
I am having exactly the same problems with version 1.6.9.

After I gave it jquery.min.js, it loaded emails, but then in the console it seems many more js files are missing.

What shall I do? I downloadad the latest STABLE release, thinking there would be no issues, but all in all this has been complete spaghetti.

M
Title: Re: No mails fetched and CSRF prohibits logout
Post by: SKaero on September 21, 2024, 07:32:11 PM
Make sure you either download the complete version of the Roundcube package that includes all Javascript dependancies or you install the Javascript dependencies by executing `bin/install-jsdeps.sh` script.
Title: Re: No mails fetched and CSRF prohibits logout
Post by: mjcc on September 22, 2024, 06:59:52 AM
Quote from: SKaero on September 21, 2024, 07:32:11 PMMake sure you either download the complete version of the Roundcube package that includes all Javascript dependancies or you install the Javascript dependencies by executing `bin/install-jsdeps.sh` script.

Yes, I followed the install instructions for js dependencies using the above mentioned .sh script. There were no errors, so I carried on my merry way...

I think the missing files were all connected with the managesieve plugin (codemirror and skins). Although I get no more errors in browser console, a simple sieve rule still does not work, and I don't see any errors anywhere.

M