The provided CSRF token is not valid about shopware6

[nielsVoogt]

@Buckaroo-Rens
I was also experiencing this issue (local only), so I did a little research on what could be the problem here.
First thing I tried was clean install of different shopware- and Buckaroo versions, problem persisted as @MelvinAchterhuis describes. Then I tried it in Firefox and the plugin worked as expected, I could add to my shoppingbasket without the CSRF error.

But it did show a warning in my console:

Cookie “session-” will be soon rejected because it has the “SameSite” attribute set to “None” or an invalid value, without the “secure” attribute. To know more about the “SameSite“ attribute,

Since 1.3.0 there's a framework.yaml file that sets cookie_samesite: none. Firefox still accepts setting these cookies, but Chrome already rejects setting these because they miss the secure attribute.

Adding the folowing file in the root html directory of shopware is what fixed the problem of adding to basket and checkout payment selection screen.

src/config/packages/framework.yaml

framework:
    session:
        cookie_secure: true

Replacing cookie_samesite with 'lax', 'strict' or null also seems to do the trick, but cookies, PHP and symfony configuration files are not really my cup of tea.

Shopware version 6.4.6.1
Buckaroo Payments 1.3.2

Still, after selecting a payment method and trying to place the order I still get the CSRF warning. Maybe these details can help somebody in the future to make a PR or solve it for themselves locally (kind of..).

[Buckaroo-Rens]

Hello @MelvinAchterhuis we will look into this a.s.a.p. keep you posted.

[Buckaroo-Rens]

@MelvinAchterhuis Can you e-mail me at [email protected] we are unable to reproduce it so any access to a staging environment would be helpful here.