Creating Project in Jira Throws 'Error creating project, XSRF check failed'
Platform Notice: Data Center Only - This article only applies to Atlassian products on the Data Center platform.
Note that this KB was created for the Data Center version of the product. Data Center KBs for non-Data-Center-specific features may also work for Server versions of the product, however they have not been tested. Support for Server* products ended on February 15th 2024. If you are running a Server product, you can visit the Atlassian Server end of support announcement to review your migration options.
*Except Fisheye and Crucible
Summary
Symptoms
Administrator can't create new project in JIRA
Diagnosis
Try create project in different web browser without any Add-Ons
Try create project when accesing JIRA directly (eg: bypassing webserver and network tools like SecureEntryServer(WAF))
Try to create project after disabling all User Plugins via Administrations > Manage Add-Ons > Enable Safe Mode and then try to reproduce the ERROR.
Ensure the following tomcat attributes are added in the
server.xmlwhen integrating Proxy (SSL) with JIRA server:1scheme="https" proxyName="proxy.atlassian.com" proxyPort="PORT"Reference: Cross Site Request Forgery (CSRF) protection changes in Atlassian REST
Cause
Some of the JIRA headers are blocked. For example, X-AREQUESTID, X-ASESSIONID, X-AUSERNAME, X-SITEMESH-OFF, X-Atlassian-Token request headers are blocked in the network configuration
Solution
Resolution
Ensure that all JIRA's header are not blocked
Was this helpful?