Spring Security CSRF Token not working with AJAX call & form submit in same JSP

后端 未结 3 928

I am trying to implement spring security (ver 3.2.3) CSRF token in my project by referring below links

http://docs.spring.io/autorepo/docs/spring-security/4.0.0.CI-

3条回答
  •  余生分开走
    2021-01-06 08:42

    I hope this below answer helps. Make these changes

    var csrfParameter = $("meta[name='_csrf_parameter']").attr("content");
    var csrfToken = $("meta[name='_csrf']").attr("content"); 
    var csrfHeader = $("meta[name='_csrf_header']").attr("content");  // THIS WAS ADDED
    

    and after

    data[csrfParameter] = csrfToken;
    data["institutionId"] = option;
    headers[csrfHeader] = csrfToken;    // THIS WAS ADDED
    

    finally change in the ajax call:

    url: './getMerchantByInstitution.htm',
    headers: headers,    // THIS WAS ADDED
    data: data,//"institutionId=" + option,
    dataType:'json',
    

    Let me know if this works.

提交回复
热议问题