Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Identify source of invalid crumb starting 6fc027348 and remediate #3485

Closed
Tracked by #3380
sxa opened this issue Mar 21, 2024 · 4 comments
Closed
Tracked by #3380

Identify source of invalid crumb starting 6fc027348 and remediate #3485

sxa opened this issue Mar 21, 2024 · 4 comments
Assignees

Comments

@sxa
Copy link
Member

sxa commented Mar 21, 2024

We're getting one of these every five seconds in the jenkins system log and it's certainly been going for a few days and producing one of these roughly every five seconds and is accounting for about 25% of the lines in the log:

2024-03-19 22:59:27.813+0000 [id=1216288] WARNING hudson.security.csrf.CrumbFilter#doFilter: Found invalid crumb 6fc027348e106dfb4ce52f6fbfc63c74dcae604f2e24e1efb46470f318326a67. If you are calling this URL with a script, please use the API Token instead. More information: https://www.jenkins.io/redirect/crumb-cannot-be-used-for-script

We should identify the source of it and clean it up. It could just be someone's expired session.

@sxa sxa mentioned this issue Mar 21, 2024
20 tasks
@sxa
Copy link
Member Author

sxa commented Mar 21, 2024

Looks to be a session of @steelhead31 's relating to the test-docker-sles12-s390x-1 machine.

@steelhead31 steelhead31 self-assigned this Mar 21, 2024
@steelhead31
Copy link
Contributor

Think I've resolved this, a cached webpage I believe, in a crashed browser session, that wasn't visible
anywhere...

@steelhead31
Copy link
Contributor

Resolved.

@sxa
Copy link
Member Author

sxa commented Mar 22, 2024

Noting that the sensible string to check for if we want to identify this in the future is:
WARNING hudson.security.csrf.CrumbFilter#doFilter: No valid crumb was included in request for <jenkins url path> by <username>. Returning 403.
Searching for CrumbFilter.*403 works quite well.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
Status: Done
Development

No branches or pull requests

2 participants