CSRF token verification failed trying to login after upgrading to 7.2.2 from 6.5.1

Technical assistance
1

Infos:

Version: 7.2
Upgrade path:
6.5.1 → 6.5.4 → 7.0 → 7.1 → 7.2
Symptoms:

  • Microsoft Office 365 login fails
  • Local password login fails
  • Security token verification failed
  • ActionController::InvalidAuthenticityToken
  • CSRF token verification failed
    Running in a docker container on an azure vm running Linux (ubuntu 24.04), was all working fine before upgrading, but cannot login now because of the CSRF token verification error.
  • Used Zammad version:
  • Used Zammad installation type: (source, package, docker-compose, …)
  • Operating system:
  • Browser + version:

Expected behavior:

Actual behavior:

Steps to reproduce the behavior:

2

Also adding we have also added an Azure VPN Client in front of the VM, so the VM has no longer a public address but our DNS record has been changed to point to the private IP address. After chasing through with AI testing everything it seems to come down to no set_cookie in the request headers and therefore this is causing the CSRF invalid issue. Bit stuck now and AI is just going round in circles.