Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and
privacy statement. We’ll occasionally send you account related emails.
Already on GitHub?
to your account
Kazuki Shimizu (Migrated from SEC-2422) said:
settings is following:
<sec:http auto-config="true" use-expressions="true">
Detected the session time-out when called GET method, but not detected session time-out when called POST method.
When called POST method, occurred the CSRF token error.
This behavior are best practice in the spring security?
Also When called POST method, i wanted to detect the session time-out.
If wanted to detect the session timeout when called POST method, what should I do?
The text was updated successfully, but these errors were encountered:
Rob Winch said:
Thanks for the report. This is now resolved in master and will be part of 3.2 release.
Sorry, something went wrong.
No branches or pull requests