Bad or missing csrf value on post call

[Former Member]

I am creating simple method in a controller and calling from UI , it is a post method and giving error as 403. Sample UI part url : targeturl data : JSON.stringify(requestData), type : "POST", datatype : 'json', contentType:'application/json', cache : false

Sample method part @RequestMapping(value = "/method1", method = RequestMethod.POST, produces = "application/json") @ResponseBody public String method1(final DTO dto1) {}

[Former Member]

Hi, Thanks for your prompt response. I have already tried by adding csrf token with request data as var requestData = { varA : test, CSRFToken : "Token generated" } ; data : JSON.stringify(requestData), Output as {varA: ["1", "2"], CSRFToken: "b84dd9d8-b740-91f0-a7ca-bba66f7b46f6"} with the same error as 403.

[Marko_salonen]

Hi, you need to add CSFR token to your request. You should get the token from the server when you request the page and after that you send it back with the post request.

[Marko_salonen]

There are some description of this here : https://help.hybris.com/6.7.0/hcd/c8145542c2564bb29f6cf2fb6fe67b90.html (see under CSRF token)