I dunno if you've had this before, but I fairly frequently am confronted with this whenever I try to change something in CFAdmin:
This is after I successfully login, and can click around no worries, but as soon as I go to change anything, I get this error. This is a concern because it looks like there's a disconnect between CFAdmin's authentication (logging in) and authorisation (what one can do once logged in).
I used to think this was because I was accessing CFAdmin for various different CF installs / versions on the same domain (localhost), and thought it was "one of those things",a dn I work around it by always using an incognito window. But I have just proven it is not that, and it's just bungness in ColdFusion.
I am setting up a new machine, and I have just installed ColdFusion for the first time, and the very first time I went into CFAdmin and clicked "Check for Updates" I got that error.
In the console I noticed this:
INFO: Server startup in 38003 ms
Aug 22, 2014 11:50:16 AM Information [http-bio-8500-exec-3] - Initialize client.properties file
Aug 22, 2014 11:50:20 AM Information [http-bio-8500-exec-10] - C:\apps\adobe\ColdFusion\11\express\cfusion\logs\application.log initialized
Aug 22, 2014 11:50:20 AM Information [http-bio-8500-exec-10] - Session rotated successfully.
Aug 22, 2014 11:50:20 AM Information [http-bio-8500-exec-10] - Invalid login for Default User
Aug 22, 2014 11:50:22 AM Information [http-bio-8500-exec-10] - Session rotated successfully.
Aug 22, 2014 11:50:22 AM Information [http-bio-8500-exec-10] - C:\apps\adobe\ColdFusion\11\express\cfusion\logs\audit.log initialized
Aug 22, 2014 11:50:22 AM Information [http-bio-8500-exec-10] - User admin logged in.
Aug 22, 2014 11:50:30 AM Warning [http-bio-8500-exec-10] - There was an error while verifying the token. Either the session timed out or un-authenticated access is suspected.
The first "Invalid login for Default User" was me forgetting what the default password is for CF Express (I tried "password", not "admin"), but the second "User admin logged in" was a successful login. And the very next mouseclick I was not logged in, it seems.
So I think this demonstrates it's not just caused by "unexpected CF usage" on my part, it's just bungness in CF.
Have you experienced this? Wanna go up-vote the ticket: 3810459?
--
Adam
