Roundcube Community Forum

 

No mails fetched and CSRF prohibits logout

Started by laotse, September 08, 2019, 05:59:42 PM

Previous topic - Next topic

laotse

I just did a fresh install of roundcube 1.3.10 under Debian 10.1 using nginx, PHP 7.3.4. From the installer I could send a test email and imap login worked fine. I did a first login using my IMAP credentials and it worked fine. RC fetches all folders from my dovecot, but it doesn't fetch any mail. I checked using $config['imap_debug'] = true;, and I could verify that no mail is ever attempted to be fetched. Of course there are mails - I see them in Thunderbird, Nextcloud, Horde, ...

Trying to log out failed due to CSRF. Well, it requires human interaction ... I could not yet figure out which, and according to what I found on the web it seems stange that this error pops up at logout.

As it seems the issue is different from another recent post even if the view is probably similar. But I did not have any issues in the installer.

Thanks for your help,
- lars.

SKaero


laotse

The error during logout is (German):

ANFORDERUNGSPRÜFUNG FEHLGESCHLAGEN

Zu Ihrer Sicherheit wird der Zugriff auf diese Ressource mit CSRF geschützt.
Wenn Sie dies sehen, haben Sie sich wahrscheinlich vor dem Verlassen der Webanwendung nicht abgemeldet.

Nun ist eine menschliche Interaktion erforderlich, um fortzusetzen.
Bitte kontaktieren Sie Ihren Server-Administrator.


which translates to about:

Verification of request failed

For your security the acces to this resource is secured by CSRF.
If you see this, you probably did not log out before leaving the application.

Now a human interaction is required to continue.
Please contact your server administrator.


As mentioned above, I receive this when clicking log-out!

laotse

Thanks to the similar issue https://www.roundcubeforum.net/index.php/topic,28514.0.html I checked the javascript console and it turned out that jQuery was missing. After installing the latest jQuery into /program/js I now see my mails and log out works fine.

Thanks for the inspirations,
- lars.

mjcc

I am having exactly the same problems with version 1.6.9.

After I gave it jquery.min.js, it loaded emails, but then in the console it seems many more js files are missing.

What shall I do? I downloadad the latest STABLE release, thinking there would be no issues, but all in all this has been complete spaghetti.

M

SKaero

Make sure you either download the complete version of the Roundcube package that includes all Javascript dependancies or you install the Javascript dependencies by executing `bin/install-jsdeps.sh` script.

mjcc

Quote from: SKaero on September 21, 2024, 07:32:11 PMMake sure you either download the complete version of the Roundcube package that includes all Javascript dependancies or you install the Javascript dependencies by executing `bin/install-jsdeps.sh` script.

Yes, I followed the install instructions for js dependencies using the above mentioned .sh script. There were no errors, so I carried on my merry way...

I think the missing files were all connected with the managesieve plugin (codemirror and skins). Although I get no more errors in browser console, a simple sieve rule still does not work, and I don't see any errors anywhere.

M