Date: Sun, 4 Jan 2026 02:14:01 +0100
From: "Peter 'PMc' Much" <pmc@citylink.dinoex.sub.org>
To: pgadmin-support@lists.postgresql.org
Subject: 9.11 problem: CSRF tokens do not match
Message-ID: <aVm-2RxsUPp9oWXZ@disp.intra.daemon.contact>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Archived-At: 
 <https://www.postgresql.org/message-id/aVm-2RxsUPp9oWXZ%40disp.intra.daemon.contact>
Precedence: bulk

Hi @all,

  recently I upgraded to 9.11 (from some 8.9 I think), and now at
every occasion (5 or 10 times a day) I get the error
"CSRF tokens do not match".

At that point nothing seems to help except freshly opening the
browser session - and twice a day even that doesn't work, and the
server reports a bunch of code alongside errors like:
  AttributeError: 'AnonymousUser' object has no attribute 'username'
  TypeError: 'NoneType' object is not subscriptable
  KeyError: 'auth_source_manager'
and doesn't respond and apparently wants a restart.

There was no such or similar issue earlier.

The piece runs in server mode under uwsgi behind an Apache reverse
proxy on FreeBSD-14, login is thru Kerberos.

A quick glance through the config file didn't show me anything
suspicious - the issue might as well be caused by some prereq package
(which have also been upgraded), but I am not a python guru, so I
thought it better to discuss it here, for now.

I installed from the wheel into a fresh virtualenv (after patching
"psycopg[binary]" to "psycopg[c]", because "psycopg[binary]" simply
doesn't exist for unix servers) and left all the dependencies to pip
to resolve.

-- PMc