Spring mvc security ajax request

Vote count:

0

I have mvc application that use ajax as ajax request was created by client and send to controller of mvc. Controller send back result to client. I know that i can secure in controller by @PreAuthorize to check if user login (based on spring security). But with user is anonymous, i can't check that. So my question are: 1. is there any way to check if request sent from exactly domain? Or how to detect request sent to Controller? 2. In php, (PHP and AJAX security question), server can generate token sent to client. Client attract token to ajax request send to server. Server check token... . Is there any same thing in java spring mvc? Thank for help me. And sorry about my bad english.

asked 1 min ago

Truong Pham

43

Spring mvc security ajax request