[Solved] Error unprotecting the session cookie & o...
# help-with-umbraco
c
Just recreating (rather then upgrading) my own little site to V13.0.1. It's running but for every page request (front end or back office) I get the following error in the dotnet console:- `[16:57:51 WRN] Error unprotecting the session cookie. System.Security.Cryptography.CryptographicException: The payload was invalid. For more information go to https://aka.ms/aspnet/dataprotectionwarning at Microsoft.AspNetCore.DataProtection.Managed.ManagedAuthenticatedEncryptor.Decrypt(ArraySegment`1 protectedPayload, ArraySegment`1 additionalAuthenticatedData) at Microsoft.AspNetCore.DataProtection.KeyManagement.KeyRingBasedDataProtector.UnprotectCore(Byte[] protectedData, Boolean allowOperationsOnRevokedKeys, UnprotectStatus& status) at Microsoft.AspNetCore.DataProtection.KeyManagement.KeyRingBasedDataProtector.Unprotect(Byte[] protectedData) at Microsoft.AspNetCore.Session.CookieProtection.Unprotect(IDataProtector protector, String protectedText, ILogger logger)` I'm running on Linux Mint with no TLS cert (cos it's too mind bending to sort out!). Do people see this on Windows too? Also the Umbraco log is filling up with "Error uprotecting the section cookie" Warnings and "Keep alive failed at ("http://localhost:1234/api/keepalive/ping") Errors, like over 1,000 of them in a couple of hours. This is on my dev machine, not a live site. Any advice appreciated.
The keepalive error has been fixed by setting the Global:UseHttps to true. But the warnings every few seconds remain. Even with the site at rest.
c
Does this error show up in a brand new install on the same environment?
c
Yes, even with a blank install. Just opening anything, including the login page, causes the warning.
Do you see it as well?
c
I’ve not looked for it yet. Will check when I’m back at my desk
I've tried it on my windows machine and I don't get the error.
I'm trying to test it on my linux machine but i don't seem to be able to install .net 8
If we both get it on Linux and not on Windows then I might declare there's probably another Linux Typo somewhere. OR, it could be something to do with the .net dev cert. I've never been able to install it 😉 Maybe .net 8 has tightened things up.
This one smarts a bit. To fix it, I just had to clear cookies! 🤦
2123 Views