There are some bug tasks related on CSRF token.
CSRF token was introduced long time ago with rPWBC79151ce0 I guess but there are some follow up tasks and patches:
But there where some upcoming bugs and tests failures which should be fixes. This task is just a tracker for those.
| Status | Subtype | Assigned | Task | ||
|---|---|---|---|---|---|
| Open | None | T229364 CSRF token issues (tracking) | |||
| Resolved | Xqt | T222508 action=logout needs CSRF token, since API breaking change | |||
| Resolved | BUG REPORT | Xqt | T224712 Attempt to login fails several times | ||
| Resolved | BUG REPORT | Dvorapa | T248767 login loop 2: userinfo calls _relogin calls login calls userinfo | ||
| Invalid | None | T199643 Generate a new CSRF token if the old one is invalidated | |||
| Resolved | Xqt | T226942 Action 'csrf' is not allowed for user Pywikibot-test on wikisource:zh and en:wiki | |||
| Open | None | T78393 Load token types needed for each API module from the API | |||
| Resolved | jayvdb | T85725 token methods should use the list of tokens in paraminfo | |||
| Resolved | BUG REPORT | Huji | T229293 invalid CSRF token error shown with each block | ||
| Open | None | T261050 Frequent "Invalid CSRF token" errors on Wikimedia projects using Pywikibot since August 2020 | |||
| Resolved | Xqt | T270380 Unresolved wrong CSRF token for watch action during incomplete login |