Detail about CSRF token fetch request

Created by Jerry Wang, last modified on Jun 17, 2015

updateSecurityToken

bTokenHandling

x-csrf-token

oServiceData.securityToken

ODataModel._createBatchRequest

ODataModel.prototype.refreshSecurityToken

Who has started this csrf token request? It is automatically done by oDataModel framework.

Now we know that everytime an HTTP post request is sent, the token will be forced to fresh from backend.

So it means it will not be repeatedly called every time we select another item in navigation list.

And by default, all oData instance should have set this flag as true, which could be observed in constructor.

And by default, all oData instance should have set this flag as true, which could be observed in constructor.

Created by Jerry Wang, last modified on Jul 22, 2015

updateSecurityToken

Security

Token

x-csrf-token

bTokenHandling

以opportunity为例：

如果token不available，就发Odata request到后台去取：

问题：this.bTokenHandling什么时候置为true？

在ODataModel的构造函数里。