# \[HELP\] Cannot login, error shows "BAD CSRF"

**URL:** https://meta.discourse.org/t/help-cannot-login-error-shows-bad-csrf/52424
**Category:** Support
**Created:** [November 3, 2016, 9:08am UTC](https://meta.discourse.org/t/help-cannot-login-error-shows-bad-csrf/52424 "2016-11-03T09:08:33Z")
**Posts on this page:** 1
**Showing post:** 25

<div class="post-metadata">

### Author: ![daxen](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/daxen/32/64364_2.png) [@daxen](https://meta.discourse.org/u/daxen)
#### Post date: [November 24, 2016, 10:48am UTC](https://meta.discourse.org/t/help-cannot-login-error-shows-bad-csrf/52424/25 "2016-11-24T10:48:09Z")

</div>

same here:

updated discourse+plugins yesterday.

today users reported login to discourse not possible - already logged in sessions are working fine.

showing login error: “unbekannter fehler / unknown error”  
browser console: “BAD CSRF” and some javascript

fix:  
add this to nginx config:

> proxy\_set\_header X-Forwarded-Proto https;

best regards,  
daniel

---

_[View the full topic](https://meta.discourse.org/t/help-cannot-login-error-shows-bad-csrf/52424)._