Enable CSRF #2
Labels
No Label
backend
bug
front
improvement
middleware
No Milestone
No project
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies
No dependencies set.
Reference: djmil/corda-checkers#2
Loading…
Reference in New Issue
Block a user
No description provided.
Delete Branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Providing CSRF is relatively easy for the SpringBoot. The major problem, is to effectively manage it on a client (React side).
It looks that client has to store CSRF token, which is assigned to each Session by server, and manually put it into POST req header.