# Doppler Share - POST needs CSRF Token

**URL:** <https://community.doppler.com/t/doppler-share-post-needs-csrf-token/321>\
**Category:** Need Help\
**Created:** [September 6, 2021, 7:05pm UTC](https://community.doppler.com/t/doppler-share-post-needs-csrf-token/321 "2021-09-06T19:05:37Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![mstaunton7](https://avatars.discourse-cdn.com/v4/letter/m/67e7ee/32.png) [@mstaunton7](https://community.doppler.com/u/mstaunton7)\
**Post date:** [September 6, 2021, 7:05pm UTC](https://community.doppler.com/t/doppler-share-post-needs-csrf-token/321/1 "2021-09-06T19:05:37Z")

</div>

Hey Everyone,

I was attempting to use Doppler Share to retrieve API credentials from a customer. When attempting to share the secret, there was an error saying `POST needs CSRF Token` and they were not able to share the secret with me. I was not able to recreate this after the error and was able to successfully test before hand.

Does anyone have any idea what would cause that issue? I would like to use Doppler Share versus an alternative like OneTimeSecret. It could always be something on their VPN that restricts use of Doppler Share, but I just wanted to reach out to see if there are other ideas.

Thanks,  
Mike

---

<div class="post-metadata">

**Author:** ![ryan-blunden](https://sea2.discourse-cdn.com/flex016/user_avatar/community.doppler.com/ryan-blunden/32/9_2.png) [@ryan-blunden](https://community.doppler.com/u/ryan-blunden)\
**Post date:** [September 7, 2021, 6:34am UTC](https://community.doppler.com/t/doppler-share-post-needs-csrf-token/321/2 "2021-09-07T06:34:28Z")

</div>

Thanks for reporting Mike (@mstaunton7).

I’ll let our engineers know to see if we can reproduce.

---

<div class="post-metadata">

**Author:** ![ryan-blunden](https://sea2.discourse-cdn.com/flex016/user_avatar/community.doppler.com/ryan-blunden/32/9_2.png) [@ryan-blunden](https://community.doppler.com/u/ryan-blunden)\
**Post date:** [September 7, 2021, 10:34pm UTC](https://community.doppler.com/t/doppler-share-post-needs-csrf-token/321/5 "2021-09-07T22:34:56Z")

</div>

Hi Mike,

We haven’t been able to determine the cause on our end. If there are any details you can share with us, such as the browser, operating system and if they’re using a VPN, that would help.

And just to confirm, are they still unable to get this working?

---

<div class="post-metadata">

**Author:** ![mstaunton7](https://avatars.discourse-cdn.com/v4/letter/m/67e7ee/32.png) [@mstaunton7](https://community.doppler.com/u/mstaunton7)\
**Post date:** [September 8, 2021, 2:16am UTC](https://community.doppler.com/t/doppler-share-post-needs-csrf-token/321/6 "2021-09-08T02:16:58Z")

</div>

Hey Ryan,

Another person at their company was able to share secrets so I am not sure if its a VPN issue. I have another meeting setup with them tomorrow. I will see if I can reproduce the issue or if it was a one off issue.

---

<div class="post-metadata">

**Author:** ![ryan-blunden](https://sea2.discourse-cdn.com/flex016/user_avatar/community.doppler.com/ryan-blunden/32/9_2.png) [@ryan-blunden](https://community.doppler.com/u/ryan-blunden)\
**Post date:** [September 8, 2021, 2:19am UTC](https://community.doppler.com/t/doppler-share-post-needs-csrf-token/321/7 "2021-09-08T02:19:41Z")

</div>

Sounds good. Thanks Mike!