HTTP Status 403 - Expected CSRF token not found

[spring-attic]

HTTP Status 403 - Expected CSRF token not found

[rwinch]

How long do you sit on the page? If the session expires (which contains the expected CSRF token), then your token is no longer valid and will produce the error message you see.

[huguangju]

You are right.I was sit on the page for a long time for debug.But how can I know how long session expires?Where it is configured?

[indyaah]

@huguangju : usually it can be configured at 2 place.

1. Container : i.e for tomcat TOMCAT_HOME/conf/web.xml for tomcat default is 30 min.
2. WebApp descriptor : i.e for this project you can add something like this in web.xml

<session-config>
   <session-timeout>15</session-timeout> <!-- in minutes -->
</session-config>

[huguangju]

Thank you.