csrf_rejected

HTTP status: 403 · Code: csrf_rejected

A console call that changes something came from another site.

Why it happens

A console call that changes something came from another site. The console refuses these so another page can’t act with your console session.

How to fix

Make the change from the console itself. If you see this inside the console, reload the page; if it persists, check that you open the console at the same URL as ORVANO_PUBLIC_URL.

Catch it in your code

Every SDK throws one error type for a failed call. Match on its code, which is always csrf_rejected for this error, never on the message.

JavaScript and Next.js

import { ErrorCode, OrvanoError } from '@orvano/js'

try {
  // your Orvano call
} catch (error) {
  if (error instanceof OrvanoError && error.code === ErrorCode.csrfRejected) {
    // handle csrf_rejected
  } else {
    throw error
  }
}

Dart and Flutter

import 'package:orvano_flutter/orvano_flutter.dart'; // or orvano_dart on a server

try {
  // your Orvano call
} on OrvanoException catch (error) {
  if (error.code != ErrorCode.csrfRejected) rethrow;
  // handle csrf_rejected
}

.NET

using Orvano;

try
{
    // your Orvano call
}
catch (OrvanoException error) when (error.Code == ErrorCode.CsrfRejected)
{
    // handle csrf_rejected
}

The error also carries the HTTP status (403), a message, and a request ID. Quote the request ID when you report a problem: the server logs it with the failure. See Errors for how errors work in every SDK, or every error code.