Error when signing in - "Session does not contain antiforgery ID." #200 about aad-sso-wordpress HOT 8 OPEN

I also have the following warning in my console log
Cross-Origin Read Blocking (CORB) blocked cross-origin response https://login.microsoftonline.com/common/oauth2/authorize?response_type=code&scope=openid&domain_hint=&client_id=f024538c-7fcf-4a7c-89d2-256cdf49a1f2&resource=https%3A%2F%2Fgraph.microsoft.com&redirect_uri=https%3A%2F%2Fhomeoffice.xploregroup.be%2Fwp-login.php&state=%7BEA2213AF-53EB-341F-4295-EDB616D3EEB7%7D&nonce=%7BEA2213AF-53EB-341F-4295-EDB616D3EEB7%7D with MIME type text/html. See https://www.chromestatus.com/feature/5629709824032768 for more details.

from aad-sso-wordpress.

@stefanie-sidekick Can you share the details about how your site is deployed (most importantly, the list of plugins you have enabled)?

from aad-sso-wordpress.

from aad-sso-wordpress.

Thanks for the follow-up. I will take a look ASAP with the latest WordPress and let you know.

from aad-sso-wordpress.

@stefanie-sidekick I've tested on all the recent versions of WordPress and haven't been able to reproduce the issue you described. If you have any additional details I could use to try to reproduce the problem, that would be awesome. Thanks!

from aad-sso-wordpress.

Hi Phillipe,

I now have the same problem with a new website.
If you go to https://demo.sidekick.be/cronos-public-services/samen-werken/ you can click on login and that will redirect to the azure ad login.
After I logged me in with my cronos account I get redirect to /wp-login.php with the same error. "Session does not contain antiforgery ID."

What I'm I doing wrong?

from aad-sso-wordpress.

@stefanie-sidekick I'm still unable to reproduce the issue, and I can't access the URL you shared. Can you please contact me at [email protected] so we can troubleshoot further?

from aad-sso-wordpress.

Check your session configuration on your php server. Found that mine was a result of an invalid session_save path.

from aad-sso-wordpress.