{"action":"opened","issue":{"url":"https://api.github.com/repos/cloudfoundry-incubator/admin-ui/issues/157","repository_url":"https://api.github.com/repos/cloudfoundry-incubator/admin-ui","labels_url":"https://api.github.com/repos/cloudfoundry-incubator/admin-ui/issues/157/labels{/name}","comments_url":"https://api.github.com/repos/cloudfoundry-incubator/admin-ui/issues/157/comments","events_url":"https://api.github.com/repos/cloudfoundry-incubator/admin-ui/issues/157/events","html_url":"https://github.com/cloudfoundry-incubator/admin-ui/issues/157","id":149846165,"number":157,"title":"CSRF Invalid token for url ","user":{"login":"chrisrana","id":16615487,"avatar_url":"https://avatars.githubusercontent.com/u/16615487?v=3","gravatar_id":"","url":"https://api.github.com/users/chrisrana","html_url":"https://github.com/chrisrana","followers_url":"https://api.github.com/users/chrisrana/followers","following_url":"https://api.github.com/users/chrisrana/following{/other_user}","gists_url":"https://api.github.com/users/chrisrana/gists{/gist_id}","starred_url":"https://api.github.com/users/chrisrana/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/chrisrana/subscriptions","organizations_url":"https://api.github.com/users/chrisrana/orgs","repos_url":"https://api.github.com/users/chrisrana/repos","events_url":"https://api.github.com/users/chrisrana/events{/privacy}","received_events_url":"https://api.github.com/users/chrisrana/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":0,"created_at":"2016-04-20T18:19:40Z","updated_at":"2016-04-20T18:19:40Z","closed_at":null,"body":"Iwas using cf-205 adminui login was working like charm.recenltyI was trying integrate Admin ui with Cf-231.While login I get  error in welcome page\r\n\r\nInvalid login attempt, request does not meet our security standards, please try again.I am giving correct credential still i am getting this error.\r\n\r\n\r\nOn checking uaa log I found \r\n CSRF Invalid token for url\r\n\r\n\r\nHere is my UAA TCP DUMP\r\n\r\nHost: uaa.testinception25.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:45.0) Gecko/20100101 Firefox/45.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8\r\nAccept-Encoding: gzip, deflate, br\r\nAccept-Language: en-US,en;q=0.5\r\nCookie: CP_GUTC=72.163.4.167.1450523386696152; utag_main=v_id:0152a6f950cb001b530d825bce9809048001500d00868$sn:1$ss:1$_pn:1%3Bexp-session$_st:1454502103051$ses_id:1454500303051%3Bexp-session; sc_suite=visc-us; s_fid=12436B75D244D97D-1E8EEB3AA3AEE40A; rack.session=BAh7BkkiD3Nlc3Npb25faWQGOgZFRiJFM2RjOTM0NTEwNTQ5MTQxMmEwNzcx%0AYWZhY2YyOTU2MDM4YzIyNWU3Y2NkMDllMzI2ZDg2NWJlNTA4MGQ4MjExNg%3D%3D%0A--f6caa63c5dab82aa3cc6849dbc39a50c43c378a5; __VCAP_ID=648014f3-79c7-4665-489d-3292c5c7259b; JSESSIONID=7428BC57F8A9FEC6C3FADA19F253E6D8; AMAuthCookie=AQIC5wM2LY4Sfcz4TrZFFIGFV6DgP-byGPwOEnjVkIJvM1c.AAJTSQACMDEAAlNLABQtNDA1NjM1NDYxOTYwMjk1OTk0NwACUzEAAA..; amlbcookie=01\r\nX-Cf-Applicationid:\r\nX-Cf-Instanceid: 648014f3-79c7-4665-489d-3292c5c7259b\r\nX-Forwarded-For: 174.38.116.197, 10.20.0.173, 10.20.0.53\r\nX-Forwarded-Host: skyfallui-testinception25.com\r\nX-Forwarded-Proto: https\r\nX-Forwarded-Server: haproxyvms8080.com\r\nX-Request-Start: 1461174268732\r\nX-Vcap-Request-Id: 4f46c74b-6133-4d2f-4bea-debbf16ef2b2\r\nConnection: close\r\n\r\n...{...GHTTP/1.1 200 OK\r\nServer: Apache-Coyote/1.1\r\nStrict-Transport-Security: max-age=31536000 ; includeSubDomains\r\nCache-Control: no-cache, no-store, max-age=0, must-revalidate\r\nPragma: no-cache\r\nExpires: 0\r\nX-XSS-Protection: 1; mode=block\r\nX-Frame-Options: DENY\r\nX-Content-Type-Options: nosniff\r\nSet-Cookie: X-Uaa-Csrf=mfDZv6; Expires=Wed, 20-Apr-2016 17:49:28 GMT; HttpOnly\r\nContent-Type: text/html;charset=ISO-8859-1\r\nContent-Language: en-US\r\nContent-Length: 2307\r\nDate: Wed, 20 Apr 2016 17:44:28 GMT\r\nConnection: close\r\n\r\n<!DOCTYPE html>\r\n\r\n\r\n.....\r\n.......\r\n\r\n..a...aNPOST /login.do HTTP/1.1\r\nHost: uaa.testinception25.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:45.0) Gecko/20100101 Firefox/45.0\r\nContent-Length: 59\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8\r\nAccept-Encoding: gzip, deflate, br\r\nAccept-Language: en-US,en;q=0.5\r\nContent-Type: application/x-www-form-urlencoded\r\nCookie: CP_GUTC=72.163.4.167.1450523386696152; utag_main=v_id:0152a6f950cb001b530d825bce9809048001500d00868$sn:1$ss:1$_pn:1%3Bexp-session$_st:1454502103051$ses_id:1454500303051%3Bexp-session; sc_suite=visc-us; s_fid=12436B75D244D97D-1E8EEB3AA3AEE40A; rack.session=BAh7BkkiD3Nlc3Npb25faWQGOgZFRiJFM2RjOTM0NTEwNTQ5MTQxMmEwNzcx%0AYWZhY2YyOTU2MDM4YzIyNWU3Y2NkMDllMzI2ZDg2NWJlNTA4MGQ4MjExNg%3D%3D%0A--f6caa63c5dab82aa3cc6849dbc39a50c43c378a5; __VCAP_ID=648014f3-79c7-4665-489d-3292c5c7259b; JSESSIONID=7428BC57F8A9FEC6C3FADA19F253E6D8; AMAuthCookie=AQIC5wM2LY4Sfcz4TrZFFIGFV6DgP-byGPwOEnjVkIJvM1c.AAJTSQACMDEAAlNLABQtNDA1NjM1NDYxOTYwMjk1OTk0NwACUzEAAA..; amlbcookie=01\r\nReferer: https://skyfallui-testinception25com/uaa/login\r\nX-Cf-Applicationid:\r\nX-Cf-Instanceid: 648014f3-79c7-4665-489d-3292c5c7259b\r\nX-Forwarded-For: 174.38.116.197, 10.20.0.173, 10.20.0.53\r\nX-Forwarded-Host: skyfallui-testinception25.com\r\nX-Forwarded-Proto: https\r\nX-Forwarded-Server: haproxyvms8080.com\r\nX-Request-Start: 1461174383251\r\nX-Vcap-Request-Id: 4d8107dd-7911-472c-73b0-d43c1306769a\r\nConnection: close\r\n\r\nusername=admin&password=1234abcd&X-Uaa-Csrf=mfDZv6\r\n\r\n..aT..a.HTTP/1.1 403 Forbidden\r\nServer: Apache-Coyote/1.1\r\nStrict-Transport-Security: max-age=31536000 ; includeSubDomains\r\nCache-Control: no-cache, no-store, max-age=0, must-revalidate\r\nPragma: no-cache\r\nExpires: 0\r\nX-XSS-Protection: 1; mode=block\r\nX-Frame-Options: DENY\r\nX-Content-Type-Options: nosniff\r\nSet-Cookie: X-Uaa-Csrf=IjM5CY; Expires=Wed, 20-Apr-2016 17:51:23 GMT; HttpOnly\r\nContent-Type: text/html;charset=ISO-8859-1\r\nContent-Language: en-US\r\nContent-Length: 2467\r\nDate: Wed, 20 Apr 2016 17:46:23 GMT\r\nConnection: close"}}