<div dir="ltr">I use Chrome on Ubuntu and version 1.1-alpha-1<div><br></div><div>I'm using the default keycloak theme, but the stateChecker never gets sent with the form params, so it's always null and I get the error code</div></div><div class="gmail_extra"><br><div class="gmail_quote">On Thu, Oct 9, 2014 at 5:34 AM, Stian Thorgersen <span dir="ltr"><<a href="mailto:stian@redhat.com" target="_blank">stian@redhat.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">Not a known bug and it works fine here. I'll need more info:<br>
<br>
* Browser<br>
* KC version<br>
* Is this with unmodified theme? If not can you try with the default theme and see if the problem exists there as well<br>
<br>
Also, open <a href="http://serverUrl/auth/realms/{realm}/account" target="_blank">http://serverUrl/auth/realms/{realm}/account</a>. Then view source and check if it has a hidden input field with the name stateChecker. Then check if a cookie KEYCLOAK_STATE_CHECKER is set with the same value.<br>
<br>
BTW the state checker is to prevent CSRF attack.<br>
<div><div class="h5"><br>
----- Original Message -----<br>
> From: "Rodrigo Sasaki" <<a href="mailto:rodrigopsasaki@gmail.com">rodrigopsasaki@gmail.com</a>><br>
> To: <a href="mailto:keycloak-user@lists.jboss.org">keycloak-user@lists.jboss.org</a><br>
> Sent: Wednesday, 8 October, 2014 10:08:41 PM<br>
> Subject: [keycloak-user] Problem Updating Account<br>
><br>
> Hi. I'm having some trouble with the account page.<br>
><br>
> I try updating my profile at <a href="http://serverUrl/auth/realms/{realm}/account" target="_blank">http://serverUrl/auth/realms/{realm}/account</a><br>
><br>
> When I try editing my account info (firstName, email...) I have a problem<br>
> when I hit save.<br>
><br>
> the processAccountUpdate method inside AccountService.java invokes a<br>
> csrfCheck method, that checks if a stateChecker variable is present on my<br>
> post, but it's always null, so I can never update my account info.<br>
><br>
> Is this a known bug?<br>
><br>
> Thanks again<br>
><br>
> --<br>
> Rodrigo Sasaki<br>
><br>
</div></div>> _______________________________________________<br>
> keycloak-user mailing list<br>
> <a href="mailto:keycloak-user@lists.jboss.org">keycloak-user@lists.jboss.org</a><br>
> <a href="https://lists.jboss.org/mailman/listinfo/keycloak-user" target="_blank">https://lists.jboss.org/mailman/listinfo/keycloak-user</a><br>
</blockquote></div><br><br clear="all"><div><br></div>-- <br><div dir="ltr"><font face="Times New Roman">Rodrigo Sasaki</font><div></div></div>
</div>