Re: Redirect on POST

2019-06-07 Thread Aldian Fazrihady
How does your client call your POST API? Via AJAX (assuming, CORS header properly set), or via action attribute of the form? If it is called via action attribute, then there should be no problem with HTTPResponseRedirect. You probably need a bug fixing. If it is called via Ajax, then, IMO, there is

Redirect on POST

2019-06-07 Thread Mark Davies Tan
Hi all, I have this scenario. I have a client who wants to call a POST API of mine which then redirects to my site. So client has his own site which has a button that does a POST to my registration API to register a user onto my site and should automatically redirect to my site without the clie

if user double-clicks form submit with csrf token, even with redirect on POST browser shows 403 FORBIDDEN and csrf failed message

2017-08-02 Thread Mark Mikofski
okay, this is weird. If a user double-clicks the form submit button, even tho POST should redirect, they still get 403 FORBIDDEN with csrf failed message. I think this is like a web developer question, is this some latency issue with my browser, network or web server? I use Apache-2 httpd with