syncfusionexamples / ej2-mvc-grid-antiforgerytoken Goto Github PK

View Code? Open in Web Editor NEW

Performing CRUD operation with AntiForgeryToken

C# 34.55% CSS 1.96% JavaScript 39.34% ASP.NET 0.40% HTML 23.74%

ej2-mvc-grid-antiforgerytoken's Introduction

Performing CRUD operation with AntiForgeryToken

This sample explains about how to perform the CRUD operation with AntiForgeryToken in ASP.NET MVC DataGrid.

Anti-forgery token is used between the client and server to prevent cross-site request forgery (CSRF) attack. For more information on preventing CSRF attack, please refer to the link.

The below custom adaptor is used to send anti-forgery token while performing CRUD operation.

window.customAdaptor = new ej.data.UrlAdaptor();

    customAdaptor = ej.base.extend(customAdaptor, {

        processResponse: function (data, ds, query, xhr, request, changes) {
            request.data = JSON.stringify(data);
            return ej.data.UrlAdaptor.prototype.processResponse.call(this,data, ds, query, xhr, request, changes)
        },
        insert: function (dm, data, tableName) {
            return { 
                url: dm.dataSource.insertUrl || dm.dataSource.crudUrl || dm.dataSource.url,
                data: $.param({
                    __RequestVerificationToken: document.getElementsByName("__RequestVerificationToken")[0].value,
                    value: data,
                    table: tableName,
                    action: 'insert'
                }),
                contentType: 'application/x-www-form-urlencoded; charset=UTF-8'
            }
        },
        update: function (dm, keyField, value, tableName) {
            return {
                url: dm.dataSource.updateUrl || dm.dataSource.crudUrl || dm.dataSource.url,
                data: $.param({
                    __RequestVerificationToken: document.getElementsByName("__RequestVerificationToken")[0].value,
                    value: value,
                    table: tableName,
                    action: 'insert'
                }),
                contentType: 'application/x-www-form-urlencoded; charset=UTF-8'
            };
        }
    });