{"action":"created","issue":{"url":"https://api.github.com/repos/andreymal/ponyfiction.org/issues/5","repository_url":"https://api.github.com/repos/andreymal/ponyfiction.org","labels_url":"https://api.github.com/repos/andreymal/ponyfiction.org/issues/5/labels{/name}","comments_url":"https://api.github.com/repos/andreymal/ponyfiction.org/issues/5/comments","events_url":"https://api.github.com/repos/andreymal/ponyfiction.org/issues/5/events","html_url":"https://github.com/andreymal/ponyfiction.org/issues/5","id":302000516,"number":5,"title":"[не смешно] The CSRF session token is missing. Сервер не устанавливает куки, не могу войти и запросить сброс пароля","user":{"login":"fox0","id":15684995,"avatar_url":"https://avatars3.githubusercontent.com/u/15684995?v=4","gravatar_id":"","url":"https://api.github.com/users/fox0","html_url":"https://github.com/fox0","followers_url":"https://api.github.com/users/fox0/followers","following_url":"https://api.github.com/users/fox0/following{/other_user}","gists_url":"https://api.github.com/users/fox0/gists{/gist_id}","starred_url":"https://api.github.com/users/fox0/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/fox0/subscriptions","organizations_url":"https://api.github.com/users/fox0/orgs","repos_url":"https://api.github.com/users/fox0/repos","events_url":"https://api.github.com/users/fox0/events{/privacy}","received_events_url":"https://api.github.com/users/fox0/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":4,"created_at":"2018-03-03T14:06:12Z","updated_at":"2018-03-11T13:08:52Z","closed_at":null,"author_association":"NONE","body":"Идентификатор сборки: Mozilla/5.0 (X11; Linux i686; rv:58.0) Gecko/20100101 Firefox/58.0\r\n\r\n1) от сервера приходит сессионная кука, но! Для домена .ponyfiction.org; HttpOnly; Сайт работает https://ponyfiction.org/ на другом (возможно) домене и по https. Из-за этого браузер игнорит куку и не принимает её.\r\n2) Понятия не имею где должно быть \"CSRF session token\", в куках или где, но ни сброс пароля https://ponyfiction.org/accounts/password/reset/ ни логин https://ponyfiction.org/accounts/login/ не работает. Логи:\r\n\r\nPOST https://ponyfiction.org/accounts/password/reset/\r\nHost: ponyfiction.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:56.0) Gecko/20100101 Firefox/56.0\r\nAccept: application/json,*/*\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ponyfiction.org/accounts/password/reset/\r\ncontent-type: multipart/form-data; boundary=---------------------------13341289461704719559697187966\r\nx-ajax: 1\r\nx-csrftoken: [вырезано]\r\norigin: https://ponyfiction.org\r\nContent-Length: 392\r\nDNT: 1\r\nConnection: keep-alive\r\n\r\n-----------------------------13341289461704719559697187966\r\nContent-Disposition: form-data; name=\"csrf_token\"\r\n\r\n[вырезано]\r\n-----------------------------13341289461704719559697187966\r\nContent-Disposition: form-data; name=\"email\"\r\n\r\n[вырезано]@ya.ru\r\n-----------------------------13341289461704719559697187966--\r\n\r\nИ ответ сервера:\r\n400 Bad Request HTTP/2.0\r\nserver: nginx\r\ndate: Sat, 03 Mar 2018 14:00:55 GMT\r\ncontent-type: text/html\r\ncontent-length: 150\r\ncache-control: max-age=0\r\nvary: X-AJAX\r\nX-Firefox-Spdy: h2\r\n\r\n<!DOCTYPE HTML PUBLIC \"-//W3C//DTD HTML 3.2 Final//EN\">\r\n<title>400 Bad Request</title>\r\n<h1>Bad Request</h1>\r\n<p>The CSRF session token is missing.</p>"},"comment":{"url":"https://api.github.com/repos/andreymal/ponyfiction.org/issues/comments/372114315","html_url":"https://github.com/andreymal/ponyfiction.org/issues/5#issuecomment-372114315","issue_url":"https://api.github.com/repos/andreymal/ponyfiction.org/issues/5","id":372114315,"user":{"login":"andreymal","id":3236464,"avatar_url":"https://avatars3.githubusercontent.com/u/3236464?v=4","gravatar_id":"","url":"https://api.github.com/users/andreymal","html_url":"https://github.com/andreymal","followers_url":"https://api.github.com/users/andreymal/followers","following_url":"https://api.github.com/users/andreymal/following{/other_user}","gists_url":"https://api.github.com/users/andreymal/gists{/gist_id}","starred_url":"https://api.github.com/users/andreymal/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/andreymal/subscriptions","organizations_url":"https://api.github.com/users/andreymal/orgs","repos_url":"https://api.github.com/users/andreymal/repos","events_url":"https://api.github.com/users/andreymal/events{/privacy}","received_events_url":"https://api.github.com/users/andreymal/received_events","type":"User","site_admin":false},"created_at":"2018-03-11T13:08:52Z","updated_at":"2018-03-11T13:08:52Z","author_association":"OWNER","body":">пишет нет такого email\r\n\r\nЗначит, видимо, email отличался от такового на stories.everypony.ru и при слиянии сайтов заменился, логин бы сказал что ли"}}
{"actor":{"display_login":"andreymal"}}