CSRF current that is empty in login form using Spring MVC and Spring Security

$ {_ csrf.parameterName} and $ {_ csrf.token}, which are empty in the login form. I use Spring 4.1.3 and Spring Security 3.2.5
All configurations are done correctly, but still I get

<input type="hidden" name="${_csrf.parameterName}" value="${_csrf.token}"/>

and

<input type="hidden" name="" value=""/>
+4
source share
1 answer

I found the answer, I put the security filter tags in web.xml on top of any other filters and worked.

+3
source

Source: https://habr.com/ru/post/1569448/


All Articles