Skip to content

[TASK] New UI To Work with CSRF #483

Open
@themaherkhalil

Description

@themaherkhalil

Description

This is a security setting. When the /config call returns "csrf":true, the FE needs to make an additional call before each POST message. In the screenshot below, you can see on the new UI, it tries to make the POST message directly and gets a 403

Image

Image

On the legacy BI UI, the FE makes the call to /config/fetchCsrf and gets back a header X-Csrf-Token: <random ID".

Image

This X-Csrf-Token must then be used for all subsequent POST requests

Image

Existing

To test this locally, you must turn on the CSRF filter in Monolith project web.xml

Image

Metadata

Metadata

Assignees

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions