Skip to content

CSRF token refresh fails for request with databinding #8641

@niveathika

Description

@niveathika

When targetType is configured (data binding is used), a 403 Forbidden response is returned as an http:ClientRequestError instead of an http:Response.

The current isCSRFTokenFailure implementation only checks if the result is an http:Response. As a result, CSRF failures occurring during requests with data binding are not detected, and the automatic token refresh retry logic is not triggered.

Metadata

Metadata

Assignees

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions