Java: Cross-Site Request Forgery (CSRF)

Spring Security uses CSRF tokens to verify request authenticity.

In Spring Security, CSRF protection is enabled by default. It generates a CSRF token for each user session, which is verified with each state-changing request. This ensures the request is genuine and prevents unauthorized actions. For example, a form submission includes a hidden CSRF token field that Spring validates before processing the request.