Login Error

Hello!

I'm getting this login error when a new user tries to register and don't have a clue ... any ideas??

The anti-forgery token could not be decrypted. If this application is hosted by a Web Farm or cluster, ensure that all machines are running the same version of ASP.NET Web Pages and that the <machineKey> configuration specifies explicit encryption and validation keys. AutoGenerate cannot be used in a cluster.

After defining a machine key in web.config:

  <system.web>
<machineKey validationKey="CB95352CE9E02AC8079B51C6C77F6C2162BC3460618F957EEE54B96C912BCAF46E07A8D643BA1C9ED8968DD456195974F6069D1C59B00F2F5A7427F375EB8971" decryptionKey="346FAC441DB778808572A77A1159A8198E2DBE5F584E573E5B36BA3615E84FDB" validation="SHA1" decryption="AES"
/>

with the help of

http://www.allkeysgenerator.com/Random/ASP-Net-MachineKey-Generator.aspx

I got 2 new error messages in my log:


"The anti-forgery cookie token and form field token do not match."

and

"The anti-forgery token could not be decrypted. If this application is hosted by a Web Farm or cluster, ensure that all machines are running the same version of ASP.NET Web Pages and that the <machineKey> configuration specifies explicit encryption and validation keys. AutoGenerate cannot be used in a cluster."

I did not found a solution here in the nopcommerce forums but then I found the solution myself:

I removed these error messages by disabling

Enable XSRF protection for admin area
Enable XSRF protection for public store

in the General Settings

Hope this helps!
Greets,
Tilman