Invalid CSRF token

[iamdoubz]

What is broke?

When creating a new blog, uploading a document, etc. user is presented with all kinds of CSRF errors and warnings. Therefore, it is unusable.

Other

Happens when running directly from Git-SCM, CMD, or PowerShell.

PS C:\Plume> ./plume
Configuration read from C:\Plume\.env
Warning: the email server is not configured (or not completely).
Please refer to the documentation to see how to configure it.
🔧 Configured for production.
    => address: 127.0.0.1
    => port: 7879
    => log: critical
    => workers: 8
    => secret key: provided
    => limits: forms = 128KiB, json* = 1MiB
    => keep-alive: 5s
    => tls: disabled
🚀 Rocket has launched from http://127.0.0.1:7879
Csrf violation while acceding "/blogs/new"
Error: Multiple `Cookies` instances are active at once.
Warning: The retrieved `Cookies` instance will be empty.
Error: Multiple `Cookies` instances are active at once.
Warning: The retrieved `Cookies` instance will be empty.
Csrf violation while acceding "/blogs/new"
Csrf violation while acceding "/blogs/new"
Error: No matching routes for GET /favicon.ico image/webp.
Warning: Responding with 404 Not Found catcher.

Possible causes

No way to test, but maybe reverse proxy fixes with proper URL?