javascript - Invalid CSRF Token using Ajax -

i using purely javascript access web services built spring. when tried use ajax post call 1 of services encountered issue csrf.

the ajax call lines of:

var data = {'attribute1':'1','attribute2':'2'};  $.ajax({     type: "post",     url: url,     data: data,     success: function(data)     {            if (typeof inputid !== 'undefined') {             $("#"+inputid).val(json.stringify(data));         }         console.log(json.stringify(data));         }   }); 

i have been searching web, found update backend (jsp, php) populate attribute "${_csrf.parametername}" in form. however, not using backend, page html , javascript only.

csrf_token cookie sent down , stored in browser web framework/server. typically when posting via ajax call you're doing... need send csrf_token value part of json data. that... need use javascript find cookie name , obtain value. need assign value right variable name server expecting see. instance,

var data = { crsf_token_name_server_expects: csrf_token_value_i_obtained }; 

the csrf_token used ensure people communicating api accessed site , created valid session before trying post data it. user on google.com cannot post stackoverflow.com unless stackoverflow.com set's called cors header allows communication between google.com , stackoverflow.com go through.

based on question... said you're posting backend api powered java spring. api expects csrf_token sounds it's api supposed used domain name service setup. instance, user goes google.com , makes post www.google.com/url_to_post_to/. google ensure csrf_token sent request... not want people randomly accessing api url... without having valid google session.