title: CSRF/XSRF protection for Spring Security and AngularJS
body: <p>I tried to add CSRF/XSRF protection to my application, but ran into strange behavior. All get requests work fine, but on all post/put/delete I'm getting 403 Unauthorized. And the strangest thing is that when I tried to debug my CSRF filter, requests do not reach it, they are rejected somewhere earlier. They do not even reach my authentication filter, so I can not figure out what the problem may be.</p>
  
  <p>My security config:</p>
  
  <pre><code>        @Override
          public void configure(HttpSecurity http) throws Exception {
              http
                      ...
                      .sessionManagement().sessionCreationPolicy(SessionCreationPolicy.STATELESS)
                      .and()
                      .addFilterBefore(new StatelessAuthenticationFilter(tokenAuthenticationService()), UsernamePasswordAuthenticationFilter.class)
                      .addFilterAfter(new CsrfHeaderFilter(), CsrfFilter.class)
                      .csrf().csrfTokenRepository(csrfTokenRepository());
          }
  
          private CsrfTokenRepository csrfTokenRepository() {
              HttpSessionCsrfTokenRepository repository = new HttpSessionCsrfTokenRepository();
              repository.setHeaderName("X-XSRF-TOKEN");
              return repository;
          }
  </code></pre>
  
  <p>I do not add the filters since as I said, the requests do not reach them. But if needed I will complete my question. I hope for your help, thank you in advance!</p>