Newly introduced `CsrfTokenInterceptor` is producing large amount of warning logs

未关闭
#1,270 3 条评论 0 个 reaction 已指派 1 人 在 GitHub 查看

@ricardosrib 已经在做这个了。

开始于 2026年9月14日。

评估

这个 Issue 还没有评估数据。

描述

bug
Describe the Bug

We are consuming the com.sap.cloud.sdk.sdk-bom dependency in our CAP Java microservices. We recently upgraded to version 5.34.0 (from 5.33.0) and started to observe a large amount of warning logs of type: “Target system did not respond with a x-csrf-token header. The subsequent request may fail if a CSRF token is required.” Those seem to originate from the newly introduced CsrfTokenInterceptor.

Unfortunately, we could not find any additional information regarding this change in the release notes or similar. Apart from this, we have some concerns that this results in a big number of requests that are now emitted from this class to the request source to obtain the csrf header.

Best regards,
Felix Starke

Steps to Reproduce

As we are working on an SAP internal project, kindly reach out for further information or discussions.

Expected Behavior

Can you please clarify the need of having this Interceptor and this being an actual warning log. Furthermore, kindly clarify that the amount of HEAD-requests triggered by this is necessary.

Screenshots

No response

Used Versions
  • Java and Maven version via mvn --version: ...
  • SAP Cloud SDK version: 5.34.0
  • Spring Boot or CAP version: Spring Boot 3.5.17 with CDS Services 4.9.4
Code Examples

No response

Stack Trace

No response

Log File

No response

Affected Development Phase

Production

Impact

Impaired

Timeline

No response

主要语言
Java
星标
41
派生
33
平均合并
18 小时 34 分钟
30 天内合并 PR
19

贡献指南

打开贡献指南

从这里开始

  1. 先读完整个 Issue,再读项目的贡献指南。
  2. 在 Issue 下留言说明你要接手 —— 这能避免两个人做同样的事。
  3. Fork 仓库,在一个分支上完成修改。
  4. 提交 Pull Request,并在描述里引用这个 Issue 编号。

SAP/cloud-sdk-java 的其他 Issue

查看 SAP/cloud-sdk-java 的全部 Issue

相似的 Issue

更多 Java Issue

把新 issue 发到你的邮箱

精选适合新手参与的 GitHub issue 摘要。