I don’t think url cause this issue.

Additionally, when one person is temporarily banned for trying the password too many times, everyone will be banned together which is strange.

{
“url”: “http://xxx.xxx.xx”,
“secret”: “16af4904-abb5-4d7d-95ba-593cb6563e7a”,
“database”: “mongo”,
“mongo”: {
“host”: “127.0.0.1”,
“port”: 27017,
“username”: “”,
“password”: “”,
“database”: “nodebb”,
“uri”: “xxx”
},
“port”: 4567,
“bind_address”: “0.0.0.0”,
“debug”: true
}

Due to unknown reasons, my Nodebb instance always returns an invalid csrf token when trying to access it, and when attempting to register, it always shows that the name is already taken even though there are no duplicate names.
There’s no suspicious logs so I can only provide this information, are there any possibly effective fixes?