Custom upload method dropzone and angularjs

Question

I'm writing application (Java + Spring Boot with security on backend), Angularjs on front. I need to send file to backend with share token (security purpose). I have got csrf enabled on backend and interceptor in angular to use it when I create http request. But it doesn't work with ng-dropzone.

I added dropzone config:

$scope.logoDropzoneConfig = {
                parallelUploads: 1,
                maxFileSize: 30,
                url: '/api/companies/upload/logo',
            };

But I have got type=org.springframework.security.access.AccessDeniedException, message=Access is denied.

It is possible to write custom method to send files instead of url in config?

Can you disable csrf only for /api/companies/upload/logo with spring-security when uploading with dropzone ? http.csrf().ignoringAntMatchers("/api/companies/upload/logo") — MGR
– MGR, Commented Jul 3, 2016 at 16:34
@MGR my application have to be secure. I don't want to disable csrf for any service. It's not a solution. — Piotr Sobolewski
– Piotr Sobolewski, Commented Jul 4, 2016 at 8:24
Yes I just asked. We can talk about implementing CSRF with REST Services and not form submission but it's not the point here. How did you implemented CSRF token in your AngularJS app? (in meta tags? in a cookie ? [+ headers]) — MGR
– MGR, Commented Jul 4, 2016 at 15:02

Piotr Sobolewski · Accepted Answer · 2016-07-04 17:47:38Z

1

I resolve this problem this night. In dropzone configuration I can pass headers so, i pass authorization token like below:

$scope.logoDropzoneConfig = {
                parallelUploads: 1,
                maxFileSize: 30,
                url: '/api/companies/upload/logo',
                headers: {
                    'Authorization' :AuthServerProvider.getToken()
                }
            };

Simple, isn't it ?:)

answered Jul 4, 2016 at 17:47

Piotr Sobolewski

2,1644 gold badges28 silver badges43 bronze badges

Sign up to request clarification or add additional context in comments.

Collectives™ on Stack Overflow

Custom upload method dropzone and angularjs

1 Answer 1

Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

Comments

Your Answer

Sign up or log in

Post as a guest

Related