Pairing issues; PIN-error - "CSRF Protection Error"

[CipherVortex5]

Select Topic Area

Question

Body

I can't get pairing to work, I get "PIN-error. "CSRF Protection Error"".
I followed the guide by trying to add the WireGuard IP to the CSRF section.
I tried http://(IP), https://(IP), (IP), http://(IP):47990, https://(IP):47989 -> All of which also gave me "CSRF Protection Error" when I hit "save" button.

I then went to the sunshine.conf file and added https://(IP) there, and I saw that this also reflected in the GUI afterwards, but same error, "CSRF Protection Error" when trying to pair.

How do I solve this? All ports are open, firewall OFF for testing also.

I have done search for similar discussions but not found answer.

Using latest [sunshine_2026.914.233613-1+debiantrixie_amd64.deb]

[ReenigneArcher]

All of which also gave me "CSRF Protection Error" when I hit "save" button.

You can only change this setting from the localhost itself, or via the rest API.

[ReenigneArcher]

https://localhost:47990/

[ReenigneArcher]

You can change what is allowed to bypass csrf, but you must set this first from the server itself.

[CipherVortex5]

That's the web-gui, I'm talking about connection from a streaming device and to the server via IP:47989.
That is not working when trying to enter the pin from Moonlight on the server, it's giving the afforementioned error..

[CipherVortex5]

You can change what is allowed to bypass csrf, but you must set this first from the server itself.

That's what I did. The server that is entered in the field on the screenshot there, that is the VPN IP win which I am trying to access Sunshine from.. On Moonlight gamestream I add IP:47989, I get a "pin request", enter the pin, and then I also get CSRF Protection Error after entering correct pin.

[ReenigneArcher]

You can only pair from https://localhost:47990/ until you setup the CSRF protection rules you want. You have to do this from https://localhost:47990/

After that you can use whatever IP you setup in the CSRF protection rule.

See docs: https://docs.lizardbyte.dev/projects/sunshine/latest/md_docs_2configuration.html#csrf_allowed_origins