fastnsilver / fns-projects

Various projects demonstrating the use of Java frameworks and technologies
Apache License 2.0
1 stars 0 forks source link

Address token integration with Spring Security's CsrfFilter #9

Open fastnsilver opened 10 years ago

fastnsilver commented 10 years ago

It's not immediately apparent how to get RestGWT's FilterAwareDispatcher working seamlessly with Spring Security's CsrfFilter. On form submit, the response is always a 403. This is b/c the token is not initially set (either via meta tag or a hidden form field). How to bootstrap the token value (client-side) is what's presently mysterious.

Reading:

fastnsilver commented 10 years ago

Added a variant of this config from Josh Long: https://gist.github.com/joshlong/0951f7b27749ef8c22a3 to get up and running. Still need to revisit secure config though.