Invalid CSRF token using flag.link_builder service

I understand this patch is unlikely to be committed in its current state given the recent comments, but here's a version of it that applies against the latest beta for those that are using it already and it works for their use case.

I'm facing a issue with a view and flag:

I've a view on nodes, with the ajax flag field displayed.
For most of them, the ajax flag\unflagging works.
However, for some of them, the link fails with an access denied.
I can't determine why only a minor part of them has this problem, but from the log and debug is definitely because the CSRF token generated for those links isn't correct.

Either disabling the cache for the view, or using the patch at "nojs"/"ajax" route parameter in use-ajax link breaks CSRF protection 🐛 "nojs"/"ajax" route parameter in use-ajax link breaks CSRF protection Needs work solve the problem.

Hi, would like to echo @Giuseppe87.
I have a similar setup with an ajax flag/unflag, and after the last set of updates to the flag/flag Bookmark.
I have been facing 'csrf_token' URL query argument is invalid'.
Both solutions mentioned in #21 work (in case someone else is having this issue).

I had the same issue and from solutions in #21 only disabling cache had positive effect. Patch from "nojs"/"ajax" route parameter in use-ajax link breaks CSRF protection 🐛 "nojs"/"ajax" route parameter in use-ajax link breaks CSRF protection Needs work unfortunately didn't help

Same as #25
Only disabling cache from the view which has these flag links solves the problem.
Not the Drupal core patch or patches here fixes the issue for me.

#20 fixes the issue for me, but it can't be applied for 8.x-4.0-beta6.

The patch can be used as a temporary solution while a better approach is not implemented yet.

I updated the #20 patch to be compatible with 8.x-4.0-beta6 and changed the variable names.

#27 fixed for me!! Thank you so much.

So my problem was:

A view which displays content, each content has flags "like". (The view has infinity scroll and ajax enabled)

Without patch:
The view works perfectly with cache on, when there are no exposed filters.
When I add a exposed filter, and user sorts the view with exposed filters, (the view loads with ajax no page refresh)
then some of the flagging links does not work and gives this 'csrf_token' URL query argument is invalid.

With patch, I can now use views exposed filters, have cache on and the view can be sorted and filtered without page refresh and all the flagging links seems to be working.

MR needs reroll. Also needs tests

abhijith s → made their first commit to this issue’s fork.

Short info: Patch from MR148 might not work if patch from issue 3305405 is also applied because both change the same function