Frontend editing gets a 403 after a while

Using Neos & Flow Frontend & Integration
1

Hi,

I have a website running where users need to sign in to get access to restricted part of the website. Depending on their role they can create news for that part. Everything seems to work fine, but after a while a 403 is being thrown giving me not really much to go on.

After clearing the cache everything works fine again.

Does anyone have a clue on how to debug this to pinpoint the part where stuff fails?

Thanks in advance,

Henjo

2

Hey Henjo,

do you get messages in the Data/Logs/System_Development.log respectively System.log?

All the best,
Sebastian

3

Hi Sebastian,

thanks for your response.

This is the exception I can find:

Exception #1216919280 in line 73 of /var/www/domain.com/releases/current/Data/Temporary/Production/Cache/Code/Flow_Object_Classes/TYPO3_Flow_Security_Authorization_RequestFilter.php: You are not allowed to perform this action.
4

CSRF Probably, maybe a stale CSRF token in your cache.

5

Thanx. Do you have any pointers on where I can fix this?