无效的 CSRF 令牌 Symfony 5.4

Question

我有一个 Symfony 5.4，在开发环境（docker）中登录工作正常。但是当我通过 docker on prod 尝试相同的登录时，我有：

{"message":"Invalid CSRF token."}

AppAuthenticator.php

public function authenticate(Request $request): Passport
{
.....
return new Passport(
            new UserBadge($credentials['username']),
            new PasswordCredentials($credentials['password']),
            [new CsrfTokenBadge('authenticate', $credentials['csrf_token'])]
        );
}

security.yaml

security:
  firewalls:
    main:
       form_login:
          login_path: _security_login
          check_path: _security_check
          enable_csrf: true

login.html.twig

<form method="post">
   ....
   <input type="hidden" name="_csrf_token" value="{{ csrf_token('authenticate') }}" />
</form>

Answer 1

确保$credentials['csrf_token'] 等于$request->request->get('_csrf_token')。