Embedded stripe checkout not working while CSRF is enabled

Wappler General Bugs
1

Wappler Version : 6.8.0
Operating System : Windows 10
Server Model: NodeJS
Database Type: MariaDB
Hosting Type: Localhost + Docker for DB

Expected behavior

What do you think should happen?

When having CSRF Tokens enabled along a CSRF Token meta tag on the layout page, the embedded checkout should appear, when you try to reach it.

What actually happens?

The embedded Checkout doesn't appear and the following error appears in the logs:

errorcsrfemb
errorcsrfemb1279×88 19.5 KB

How to reproduce

Just activate CSRF along a CSRF meta tag (or even without the meta tag) on the main layout page. Then try to get an embedded checkout working.

If you want to reset this behaviour, you have to deactivate CSRF and completely close your browser.

4

Another Addendum:
When deactivating CSRF (while having a meta tag for the csrf token and then deleting the meta tag), my server action which was containing the embedded checkout session template has gone completely empty.
Another time it even copied the content of a completely different server action and replaced the server action, where the template for the checkout session was located, with the contents of this other server action.

5

Last Addendum:

Maybe rename the CSRF to Anti-CSRF so it won't result in confusion?
Because CSRF is technically the name of the attack.

6

This is getting out of hand right now.
As soon as I activate CSRF the last Server action I edited gets completely edited and changed to some other server action or is completely empty.

Reminder for everyone: Do backups often.

7

The pain of being too lazy to remember their own mistakes and repeating them...

8

Can you please make a short video demonstrating the problem, as your topic is not really clear.

9

I will try it.

10

I will have to keep working on my project. It does occur randomly when CSRF is being enabled or deactivated. I cannot replicate it atm. As soon as I have found a way, I will post a video. The first problem with the embedded checkout is still able to be replicated as described.