CSRF token doesn't work (yii2) with https

Question

I test app on local is ok. I deploy to server with https domain. When i submit form then show 400 Error: Bad Request (#400): Unable to verify your data submission.

And have problem with Https, how can i fix it

Answer 1

Maybe you have got non-secure cookies blocked when sending over https. Try this in configuration:

return [
    // ...
    'components' => [
        // ...
        'request' => [
            'class' => 'yii\web\Request',
            'csrfCookie' => [
                'httpOnly' => true,
                'secure' => true,
            ],
        ],
    ],
];