CSRF Token Mismatch During Purchase
🌐 Affected Application: ArcBlock Marketplace 📍 URL: https://marketplace.arcblock.io/auctions
📂 Module: Auction → Purchase Function
🧾 Summary: When attempting to purchase an item from the auction section, the transaction fails to process and displays an error message:
“invalid request: csrf token mismatch”
This prevents users from completing purchases successfully.
🧪 Steps to Reproduce:
- Go to https://marketplace.arcblock.io/auctions.
- Select any auction item available for purchase.
- Click the “Purchase” button.
- Wait for the transaction to process.
💥 Actual Result:
- Transaction fails to process.
- Error message appears: “invalid request: csrf token mismatch.”
✅ Expected Result:
- The purchase should process successfully and confirm the transaction without showing any CSRF-related error.
⚙️ Possible Cause:
- CSRF token not refreshed or expired session token before transaction submission.
- Possible frontend-backend desynchronization of authentication headers during auction actions.
📂 Category: Security / Transaction Handling 🧱 Severity: 🔴 High 🎯 Priority: Critical (Blocks purchase functionality and affects core marketplace operations)
2 条回复
Hello, please log out and then log back in to try again.
I tried still can't purchase