0

I have a question regarding Symfony UX Live Components and forms.

Context:

Imagine you have a Parent Component and a nested Child Component. Both are Live Components and both include Symfony FORMS (FormBuilder). However, the submit button for the child’s form is located in the Parent Component, and I use a LiveComponent emit to dispatch an event that the child’s save method listens for.

Although the event arrives correctly, I get an Invalid CSRF-TOKEN error coming from the child component.

While investigating, I discovered that Turbo UX uses the csrf_protection_controller.js Stimulus controller to generate a CSRF token. What does this imply? Must I disable Symfony’s default CSRF token handling for forms?

In my csrf.yaml, I currently have:

# Enable stateless CSRF protection for forms and logins/logouts
framework:
    form:
        csrf_protection:
            token_id: submit

    csrf_protection:
        check_header: true
        stateless_token_ids:
            # - submit
            - authenticate
            - logout

When I disable the submit entry under stateless_token_ids, the form no longer raises a CSRF error. If I inspect the Symfony Profiler (under the child’s save request → Forms), it shows :

Screenshot of Symfony Profiler

Does the CSRF token still exist, and should I therefore leave submit disabled in csrf.yaml?

Improve this question
3
  • if your project is under proxy or under docker check this:https://github.com/symfony/symfony/issues/59065 Commented Jul 11 at 10:25
  • what is the link between child form and symfony ux? do you use turbo? I think you had fallen into a misuse of symfony forms combined to symfony ux? Commented Jul 27 at 15:11
  • Yes, I use Symfony Turbo Commented Aug 6 at 19:55
Related questions
0
Symfony 2 Ajax submit, Token CSRF invalid
0
Error "The CSRF token is invalid. Please try to resubmit the form" in Symfony3
27
Symfony CSRF and Ajax
Load 6 more related questions Show fewer related questions

0

Reset to default

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Start asking to get answers

Find the answer to your question by asking.

Ask question

Explore related questions

See similar questions with these tags.