diff --git a/frontend/src/ts/modules/webbpm/interceptor/absolute-url-csrf.interceptor.ts b/frontend/src/ts/modules/webbpm/interceptor/absolute-url-csrf.interceptor.ts index 1a523cb..37e6c31 100644 --- a/frontend/src/ts/modules/webbpm/interceptor/absolute-url-csrf.interceptor.ts +++ b/frontend/src/ts/modules/webbpm/interceptor/absolute-url-csrf.interceptor.ts @@ -17,14 +17,17 @@ export class AbsoluteUrlCsrfInterceptor implements HttpInterceptor { intercept(req: HttpRequest, next: HttpHandler): Observable> { - let requestToForward = req; + if (req.method === 'GET' || req.method === 'HEAD') { + return next.handle(req); + } let token = this.extractor.getToken(); let headerName = TokenConstants.CSRF_HEADER_NAME; + if (token != null && !req.headers.has(headerName)) { let headers = {}; headers[headerName] = token; - requestToForward = req.clone({setHeaders: headers}); + req = req.clone({setHeaders: headers}); } - return next.handle(requestToForward); + return next.handle(req); } }