Detail about CSRF token fetch request
Created by Jerry Wang, last modified on Jun 17, 2015
- updateSecurityToken
- bTokenHandling
- x-csrf-token
- oServiceData.securityToken
- ODataModel._createBatchRequest
- ODataModel.prototype.refreshSecurityToken
Who has started this csrf token request? It is automatically done by oDataModel framework.
Now we know that everytime an HTTP post request is sent, the token will be forced to fresh from backend.
So it means it will not be repeatedly called every time we select another item in navigation list.
And by default, all oData instance should have set this flag as true, which could be observed in constructor.
And by default, all oData instance should have set this flag as true, which could be observed in constructor.
Created by Jerry Wang, last modified on Jul 22, 2015
- updateSecurityToken
- Security
- Token
- x-csrf-token
- bTokenHandling
以opportunity为例：
如果token不available，就发Odata request到后台去取：
问题：this.bTokenHandling什么时候置为true？
在ODataModel的构造函数里。