We have a site using Sprig and Snaptcha. One of our forms is always returning a 400 error "Unable to verify your data submission" which is usually a CSRF issue but thought Sprig takes care of CSRF?
The only solution seems to be disabled CSRF validation so suppose question is:
- if we are using Snaptcha on POST form submissions would that be sufficient (eg is CSRF needed), and
- any thoughts why sprig might be generating or submitting an incorrect CSRF token?