Struts2 provide Token Interceptor for ensures that only one request per token is processed, But, I don\'t understand how it works, if a user send the one request twice what
The token interceptor returns the result invalid.token when an invalid token is found. The logic is simple: it uses a session to save a valid token per request and when intercept it checks it by comparing one that sent and other that is from session.