Details
-
Bug Report
-
Resolution: Fixed
-
L3 - Default
-
7.13.0
Description
Given:
- Run a Camunda Tomcat|Wildfly|WAS|WLS distro on localhost:8080 (or any other host:port combination).
- Login and use the Camunda Webapps so that a CSRF cookie is stored in your browser.
- Shut down the distro.
- Run the Camund BPM Run distro or Spring Boot on the same host:port combination.
When:
You attempt to login to the Camunda Webapps.
Then:
The login attempt fails and a CSRFPreventionFilter exception is thrown. To fix it, you need to manually clear the cookies.
Expected:
Switching Camunda distros doesn't impact login attempts and a user can login without the need of manually clearing the cookies.