page1
CsrfFilter
CsrfTokenRequestHandler
AccessDeniedHandler
RequestMatcher
CsrfTokenRepository
DeferredCsrfToken
Load deferred token
1
Handle token
2
Requires CSRF
protection?
3
No, continue filter chain
Resolve token from request
5
CsrfToken
4
6
Valid token?
No, handle AccessDeniedException
Yes, continue filter chain
Yes, get token
Load token
CSRF Protection
7