Unable to install or update add-ons via UPM due to 'Invalid anti-XSRF token provided'
Platform notice: Server and Data Center only. This article only applies to Atlassian products on the Server and Data Center platforms.
Support for Server* products ended on February 15th 2024. If you are running a Server product, you can visit the Atlassian Server end of support announcement to review your migration options.
*Except Fisheye and Crucible
Problem
Universal Plugin Manager is unable to install new add-ons or update existing add-ons.
The following error message is displayed: "Invalid anti-XSRF token provided. The valid token should be retrieved transparently, but you may want to perform a hard refresh in your browser and try again before creating a support issue"
Cause
The proxy server or network configuration appears to be the root cause of the problem, but exact cause of this issue is currently unknown.
Workaround
Method 1:
Install plugin manually by file upload: Installing add-ons by file upload
Method 2:
Bypass the proxy server and access Confluence directly to install plugins via the UPM.
Method 3:
To update UPM itself, you can upload UPM jar file via file upload on the old plugin administration panel at:
http://<ServerBaseURL>/admin/viewplugins.action