X-CSRF-Token logic implementation for Java application

[former_member398316]

Hello,

We have developed common utilities functionality in Java application having few RESTful web services and now planning to implement X-CSRF-Token implementation to make it REST webservices more secured.

I found some information at

https://help.sap.com/viewer/65de2977205c403bbc107264b8eccf4b/Cloud/en-US/3756f3fc7b4342d39db1bbe57d1...

but some how as per the instruction given in this link is not working.

Could you please provide some Java example to generate csrf token and to consume it from UI5 application ?

Thanks.

[richard-zhao]

Hello, Ashutosh.To pass CSRF as a parameter by using Ajax. My solution is base on JQuery. thanks

$(document).ready(function(){
    function getCookie(c_name) {
        if(document.cookie.length > 0) {
            c_start = document.cookie.indexOf(c_name + "=");
            if(c_start != -1) {
                c_start = c_start + c_name.length + 1;
                c_end = document.cookie.indexOf(";", c_start);
                if(c_end == -1) c_end = document.cookie.length;
                return unescape(document.cookie.substring(c_start,c_end));
            }
        }
        return "";
    }

    $(function () {
        $.ajaxSetup({
            headers: {
                "X-CSRFToken": getCookie("csrftoken")
            }
        });
    });
});

it is being fetched from the request header at the server side.

[former_member398316]

Hello Richard,

Thank you for your quick response.

Could you please provide some Java application example to generate csrf token and to consume it from UI5 application?

Best regards,

Ashutosh Bharambe