整合spring security oauth2的时候如果碰到Possible CSRF detected - state parameter was present but no state could be found

整合spring security oauth2的时候如果碰到Possible CSRF detected - state parameter was present but no state could be found

jonathan
2017-07-02 / 0 评论

Attachment (5)

解决方案:https://github.com/spring-projects/spring-security-oauth/issues/322

问题所在:

The problem is the session then. You have 2 servers running on localhost, on different ports, but cookies don't record the host, only the path, and both are on the root path "/" so they are sharing a cookie. Put one of them in a sub context (e.g. using server.contextPath=/auth for the auth server) and it should work I think.

您有2台服务器在本地主机上运行,​​不同的端口,但cookie不记录主机,只有路径,并且都在根路径“/”,所以他们共享一个cookie。将其中一个放在子上下文中(例如,使用server.contextPath = / auth进行认证服务器),它应该可以工作。

评论

博主关闭了当前页面的评论