-
Notifications
You must be signed in to change notification settings - Fork 99
feat: don't ignore endpoint request for Spring csrf check #908
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Conversation
| private logout() { | ||
| logout(); | ||
| private async logout() { | ||
| await logout(); |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Endpoint calls might be rejected for invalid CSRF during the brief period between the logout request and the logout response, which updates the CSRF token. This was causing an error in IT test.
The UI should await until the logout resolves before navigating to the logout success location.
|
This ticket/PR has been released with platform 22.0.0.alpha7 and is also targeting the upcoming stable 22.0.0 version. |
vaadin/spring#908 * feat: don't ignore endpoint request for Spring csrf check * Fix: await for logout in IT test application Co-authored-by: Anton Platonov <anton@vaadin.com> Co-authored-by: Zhe Sun <31067185+ZheSun88@users.noreply.github.com> Co-authored-by: Anton Platonov <platosha@gmail.com>
vaadin/spring#908 * feat: don't ignore endpoint request for Spring csrf check * Fix: await for logout in IT test application Co-authored-by: Anton Platonov <anton@vaadin.com> Co-authored-by: Zhe Sun <31067185+ZheSun88@users.noreply.github.com> Co-authored-by: Anton Platonov <platosha@gmail.com>
vaadin/spring#908 * feat: don't ignore endpoint request for Spring csrf check * Fix: await for logout in IT test application Co-authored-by: Anton Platonov <anton@vaadin.com> Co-authored-by: Zhe Sun <31067185+ZheSun88@users.noreply.github.com> Co-authored-by: Anton Platonov <platosha@gmail.com>
vaadin/spring#908 * feat: don't ignore endpoint request for Spring csrf check * Fix: await for logout in IT test application Co-authored-by: Anton Platonov <anton@vaadin.com> Co-authored-by: Zhe Sun <31067185+ZheSun88@users.noreply.github.com> Co-authored-by: Anton Platonov <platosha@gmail.com>
vaadin/spring#908 * feat: don't ignore endpoint request for Spring csrf check * Fix: await for logout in IT test application Co-authored-by: Anton Platonov <anton@vaadin.com> Co-authored-by: Zhe Sun <31067185+ZheSun88@users.noreply.github.com> Co-authored-by: Anton Platonov <platosha@gmail.com>
vaadin/spring#908 * feat: don't ignore endpoint request for Spring csrf check * Fix: await for logout in IT test application Co-authored-by: Anton Platonov <anton@vaadin.com> Co-authored-by: Zhe Sun <31067185+ZheSun88@users.noreply.github.com> Co-authored-by: Anton Platonov <platosha@gmail.com>
vaadin/spring#908 * feat: don't ignore endpoint request for Spring csrf check * Fix: await for logout in IT test application Co-authored-by: Anton Platonov <anton@vaadin.com> Co-authored-by: Zhe Sun <31067185+ZheSun88@users.noreply.github.com> Co-authored-by: Anton Platonov <platosha@gmail.com>
depends on vaadin/hilla#116 and vaadin/flow#11922, related to vaadin/hilla#12