I’ve changed versions from 2.1 to 2.2.0 to 2.2.1 sequentially. On version 2.2.1 in production, the session started to drop suddenly and display the login page without any apparent pattern. It doesn’t matter who logs in, whether it’s admin or another role. If the session drops, sometimes when clickin…

Hy guys, We found rejections of requests to /VAADIN/push with 403 error because of CSRF in the log. Could you try disabling the CSRF for this endpoint by registering the following bean and check whether it changes anything? @Bean @Order(JmixSecurityFilterChainOrder.FLOWUI - 10) SecurityFilterChain…

Jmix

Session Drops in Production After Upgrading to 2.2.1

Support

gorbunkov (Maxim Gorbunkov) April 9, 2024, 6:47am 12

Here is a Vaadin issue for this problem: VaadinWebSecurity does not ignore CSRF for Flow PUSH connection request · Issue #19075 · vaadin/flow · GitHub

1 Like