Spring Security Logout When CSRF Enabled
20-02-2015Custom Logout and Logout Success URL:
<logout logout-url="/logout"
logout-success-url="/problemSolution/index?logout"/>
Note: /logout url is used by Spring Security. This url doesn't refer to any .jsp pages, so you can set any value.
index.jsp page:
<c:url var="logoutUrl" value="/problemSolution/logout"/>
<form action="${logoutUrl}" id="logout" method="post">
<input type="hidden" name="${_csrf.parameterName}" value="${_csrf.token}"/>
</form>
<a href="#" onclick="document.getElementById('logout').submit();">Logout</a>