Bad request issue on Azure

Question

we run into it every time after redeployment?
Issue detail:
-The first request to our cloud site (mysite cloudapp net) from any machine will be redirected to login(mysite cloudapp net/Account/Login?ReturnUrl=%2F#/)
,after filling in username/pwd, clicking login
gets “bad request”, “refresh” won’t solve this issue.
-update url back to mysite cloudapp net,
redo login, this time works.
thanks

Answer 1

I haven't solved this issue.
this is the error:
400 The anti-forgery cookie token and form field token do not match.
and I noticed the __RequestVerificationToken are different in request header and form data：
Accept:
text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Encoding:
gzip, deflate
Accept-Language:
en,en-US;q=0.8
Cache-Control:
max-age=0
Connection:
keep-alive
Content-Length:
161
Content-Type:
application/x-www-form-urlencoded
Cookie:
ai_user=0C348769-EFD5-43DB-A089-8B24FAC3E780; .AspNet.ApplicationCookie=mI_Bb1ZbDfJDjjgUSIViJV3ByuTCGSW9ISubRCuISa9lWLT1LBsFRpI6O-gZgG0zq5odVF04lg3J2zoMggN9B8f_jy2JQfAQWGMmDxdQfYlQEk5m1LtKso6iggoYReru_z6NK3gpbcVVS9mKo8ietGnBB92oieUikXtm4I3LEbPXsirkPpOH2rXfJ-PlxXQN1-w-tBpxXZakuFYmMJaOKTvXVjhymtHDSrsBs0LpYbcPCncFX_B1rSvBc8zT_99_wNkzTT1lbTIQqahVVxGr_dxDXUIkcu5X13ng_PZX-G3DikQhsyU66X721F2hhU0zwpkr4ZW8VYaAs6bFzBkMkjlv2CKlZg8zMj4FB1DqDA7dVbHymMqGz9B3Ma1_UBq3o3guv4ZDWcKRPvDWwwgEzidjLWhF9oYHwYZqj-hG9A_d4ITKc47Tde1PpVe2247zWl77hnqR07UyLZM_45J2h3hooQj8ofIsYHXoCF62seLChJd_d2Ash8RE4JJ8ByPyZmCrX0DjjZB105QcoQG04ByZHTY;
__RequestVerificationToken=a-cqe0GcLCXPRQtKr6LPGObUZP9nCC55k1P2wc2_qzWj-nhTKuREYjo2yfo2yhT-F-DV6rm9_s8dBAJDrMHFM27pFXE1; ai_session=C3B73A83-7377-4B92-A522-B73600522C11|2015-02-12T21:01:46.477Z|2015-02-12T21:01:46.957Z
DNT:
1
Host:
26ef0dfa5ecc41149068d2813447fc5d.cloudapp.net
Origin:
http://26ef0dfa5ecc41149068d2813447fc5d.cloudapp.net
Referer:
http://26ef0dfa5ecc41149068d2813447fc5d.cloudapp.net/Account/Login?ReturnUrl=%2F
User-Agent:
Mozilla/5.0 (Windows NT 6.3; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/40.0.2214.111 Safari/537.36
Query String Parametersview sourceview URL encoded
ReturnUrl:
Form Dataview sourceview URL encoded
__RequestVerificationToken:
0UoJRAXCBNKhYZ6NG9FtorrAPQmUno2ToGntepniXMsmyIswv0CyZz3oUZ3Wmxo1ZzozydyVIusZBYKTBUuTP8Tzh7k1
BTW, our website is asp.net MVC + windows identity.
this is the login page:
@using (Html.BeginForm("Login", "Account", new { ReturnUrl = ViewBag.ReturnUrl }, FormMethod.Post, new { @class = "form-horizontal", role = "form" }))
@Html.AntiForgeryToken()
this is the controller:
[HttpPost]
[AllowAnonymous]
[ValidateAntiForgeryToken]
public async Task<ActionResult> Login(LoginViewModel model, string returnUrl)
if (!ModelState.IsValid)
return View(model);
// This doesn't count login failures towards account lockout
// To enable password failures to trigger account lockout, change to shouldLockout: true
var result = await SignInManager.PasswordSignInAsync(model.Email, model.Password, model.RememberMe, shouldLockout: true);
thanks，