DSpace 7.1 - Can't Log In

[Glenn G]

So I finally got this DSpace 7.1 sorta working, but it won't let me log in through the user interface.  If I enter my email address and password, a pink balloon appears with the message:  "Invalid email or password." Chrome developer tools says, "zone-evergreen.js:2845 POST https://d7test.ourschool.edu/server/api/authn/login 403".

If I try to register as a new user, a pink error balloon pops up for several seconds.  It says, "Error when trying to register email
An error occured when registering the following email address: ..."

The same thing happens if I choose "Have you forgotten your password?"

For these actions, Chrome developer tools says, "zone-evergreen.js:2845 POST https://d7test.ourschool.edu/server/api/eperson/registrations 403"

Depending on the action, the Tomcat log says, "'POST /server/api/authn/login HTTP/1.1' 403" or 'POST /server/api/eperson/registrations HTTP/1.1' 403".

DSpace is configured to use only password authentication.  These are some of the possibly relevant settings I'm using in [dspace]/config/local.cfg:

dspace.server.url = https://d7test.ourschool.edu/server
dspace.ui.url = https://d7test.ourschool.edu
authentication-password.domain.valid = ourschool.edu
rest.cors.allowed-origins = ${dspace.ui.url}, http://127.0.0.1
proxies.trusted.ipranges = 127.0.0.1,172.31.
plugin.sequence.org.dspace.authenticate.AuthenticationMethod = org.dspace.authenticate.PasswordAuthentication
rest.cors.allowed-origins = ${dspace.ui.url}, http://127.0.0.1, http://localhost:4000, http://172.31.57.198:4000, https://127.0.0.1, https://localhost:4000, https://172.31.57.198:4000

My OS is Ubuntu 20.04 LTS.  All my DSpace backend files are owned by tomcat:tomcat.  The Angular files are owned by dspace:dspace.  This is a single-server setup.

What should I look at next?

Thanks,
Glenn

[Glenn G]

More information from Chrome developer tools:  

{"timestamp":"2021-12-22T21:13:29.565+00:00","status":403,"error":"Forbidden","message":"Access is denied. Invalid CSRF token.","path":"/server/api/eperson/registrations"}

[Glenn G]

I found the information at the following link, and will continue once I have some other things sorted out.  

https://wiki.lyrasis.org/display/DSDOC7x/Installing+DSpace#InstallingDSpace-CommonInstallationIssues

[Glenn G]

See my other post, "SSL between Angular and REST" to find out how this was resolved.