How to remove ‘Invalid security or form key. Please refresh the page’ error message when logged in Magento admin 2.4.x?

If you want to remove ‘Invalid security or form key. Please refresh the page’ error message when logged in to Magento admin 2.4.x, then you need to make changes to the following file.

Step 1 : Open the vendor file like /vendor/magento/module-backend/App/Action/Plugin/Authentication.php and override to your custom theme

Step 2 : Find below code in the bottom section of the Authentication.php file. Approx line no. 228

$requestParts = explode('/', trim($request->getRequestUri(), '/'), 3);
$baseUrlPath = trim(parse_url($this->backendUrl->getBaseUrl(), PHP_URL_PATH), '/');
$routeIndex = empty($baseUrlPath) ? 0 : 1;
$requestUri = $this->_url->getUrl($requestParts[$routeIndex]);

$requestParts = explode('/', trim($request->getRequestUri(), '/'), 3);

$baseUrlPath = trim(parse_url($this->backendUrl->getBaseUrl(), PHP_URL_PATH), '/');

$routeIndex = empty($baseUrlPath) ? 0 : 1;

$requestUri = $this->_url->getUrl($requestParts[$routeIndex]);

Step 3 : Replace above code with below mentioned code

$requestParts = strpos(trim($request->getRequestUri(),'/'), $request->getFrontName()) === 0 ?
                explode('/', trim($request->getRequestUri(), '/'), 4) :
                explode('/', trim($request->getRequestUri(), '/'), 3);
if (($key = array_search($request->getFrontName(), $requestParts)) !== false) {
    unset($requestParts[$key]);
}
$requestParams = $request->getParams();
unset($requestParams['key'], $requestParams['form_key']);
$requestUri = $this->_url->getUrl(implode('/', $requestParts), $requestParams);

$requestParts = strpos(trim($request->getRequestUri(),'/'), $request->getFrontName()) === 0 ?

explode('/', trim($request->getRequestUri(), '/'), 4) :

explode('/', trim($request->getRequestUri(), '/'), 3);

if (($key = array_search($request->getFrontName(), $requestParts)) !== false) {

unset($requestParts[$key]);

}

$requestParams = $request->getParams();

unset($requestParams['key'], $requestParams['form_key']);

$requestUri = $this->_url->getUrl(implode('/', $requestParts), $requestParams);

Step 4 : After change above code, please run below mentioned commands

- php bin/magento setup:upgrade
- php bin/magento setup:static-content:deploy
- php bin/magento cache:clean

- php bin/magento setup:upgrade

- php bin/magento setup:static-content:deploy

- php bin/magento cache:clean

That’s it…

Now logout your admin panel and again logged in and see your error now resolved…

Fill the below form if you have any Magento programming need.

Add an image programmatically from any url in Magento 2
[crayon-64216e8f54907206547666/] Using above fucntion Images can be imported directly from...
Magento 2 : Override the Category view block file
Override view block using di.xml and add the below code...
How to check list of Layout XML called for a specific page in Magento 2?
You can check a list of called layout XML for...
Magento 2 : Setup PWA from Scratch
Follow the below steps to install and set up PWA...
How to remove leading zero’s from the order, invoice and shipment number in Magento 2?
If you want to remove all leading zero's from order,...

Author Info

Hire R. Patel

Let’s have a call

Fill the form & Get Installation Support