stackoverflow?github?: The authentication provider replied with an error: csrf_detected

[jcflack]

Something changed. I have had

<link rel="me" href="https://github.com/jcflack" />
<link rel="openid2.provider" href="https://openid.indieauth.com/openid" />
<link rel="openid2.local_id" href="http://anastigmatix.net/" />

in my home page for over two years, and it has been working fine to get me into StackOverflow ... until recently.

Now, I go to StackOverflow, enter my openid, it correctly takes me to github, github logs me in, and then I end up at the page

https://indieauth.com/auth/failure?message=csrf_detected&strategy=github

Every time. ... Where did something change, and what?

-Chap

[martylamb]

+1

[singpolyma]

This is not stackoverflow specific, happens whenever I try to use the OpenID endpoint with Github as the auth provider

[yatil]

+1

[vmx]

I get the same error when trying to use OpenId via GitHub. Though non-OpenId login (e.g. via https://indieauth.com/) works.