External Users Experience Login Loop Due to CSRF Token Validation Failure
Original Question or Issue:
External users are unable to log in when accessing the system from home networks. After entering their username, password, and completing MFA, they are redirected back to the login page, resulting in a login loop. The issue does not occur when accessing the system from the office network.
Environment:
- Product - FileCloud Server
- Version - Any
- Platform - Any
Steps to Reproduce:
Error or Log Message:
Defect or Enhancement Number:
Cause:
-
Session/token inconsistency
-
Network differences (home network / NAT)
-
Reverse proxy or load balancer behavior
-
Browser cookie/session handling issues
Resolution or Workaround:
-
Ensure session persistence (sticky sessions) is enabled on the reverse proxy/load balancer
-
Verify proper forwarding of headers such as
X-Forwarded-ForandX-Forwarded-Proto -
Ensure consistent use of HTTPS (and WSS if applicable)
-
Test using an incognito browser or a different browser
-
Clear browser cache and cookies
-
Avoid network changes during login (stable connection recommended)
Notes: