CSRF Token Mismatch During Purchase
๐ Affected Application: ArcBlock Marketplace ๐ URL: https://marketplace.arcblock.io/auctions
๐ Module: Auction โ Purchase Function
๐งพ Summary: When attempting to purchase an item from the auction section, the transaction fails to process and displays an error message:
โinvalid request: csrf token mismatchโ
This prevents users from completing purchases successfully.
๐งช Steps to Reproduce:
- Go to https://marketplace.arcblock.io/auctions.
- Select any auction item available for purchase.
- Click the โPurchaseโ button.
- Wait for the transaction to process.
๐ฅ Actual Result:
- Transaction fails to process.
- Error message appears: โinvalid request: csrf token mismatch.โ
โ Expected Result:
- The purchase should process successfully and confirm the transaction without showing any CSRF-related error.
โ๏ธ Possible Cause:
- CSRF token not refreshed or expired session token before transaction submission.
- Possible frontend-backend desynchronization of authentication headers during auction actions.
๐ Category: Security / Transaction Handling ๐งฑ Severity: ๐ด High ๐ฏ Priority: Critical (Blocks purchase functionality and affects core marketplace operations)
2 replies
Hello, please log out and then log back in to try again.
I tried still can't purchase