how to implement csrf protection for cross domain requests

后端 未结 3 1848
耶瑟儿~
耶瑟儿~ 2021-01-31 10:30

I have two web apps, one for the Web UI in AngularJS and one for the REST webservices in Java. Both are deployed on separate domains.

The applications uses cookie for au

3条回答
  •  失恋的感觉
    2021-01-31 10:53

    $http docs : Angular provides a mechanism to counter XSRF. When performing XHR requests, but will not be set for cross-domain requests.

    This is a small lib put together might help you https://github.com/pasupulaphani/angular-csrf-cross-domain

提交回复
热议问题