When navigating throughout an Appian environment using Apache as a web server, users may see the following error in the application server log:
WARN com.appiancorp.security.csrf.CsrfTokenManager - There is no valid CSRF token in this request [URI=/suite/framework/backgroundAction.none]
By default, the Apache Web Server should not be setting cookies to HttpOnly. Please consult your web server admins to see if this setting is in place in the httpd.conf file and request a change back to the default settings as laid out in the Appian documentation here: Configuring Apache Web Server with JBoss
This article applies to all versions of Appian using Apache as a web server.
Last Reviewed: May 2018
© 2019 Appian. All rights reserved.