Raphael A. Bauer

Thanks for the hint! 6.6.1 should be live asap. Cheers, Raphael On Wed, Jan 22, 2020 at 1:57 PM jowerner wrote: > Latest Ninja v6.6.1 (v6.6.0 as well) is not...

Thank you for reporting! On Thu, Jan 23, 2020 at 10:46 AM jowerner wrote: > Yep, it's there now. Thanks again! > > — > You are receiving this because...

Two simple solutions: - It is very convenient to debug testcases with a running server. Just set your breakpoint, use any IDE and hit "debug testcase". - Debugging a running...

Some more information copied from google groups: https://groups.google.com/forum/#!topic/ninja-framework/KU4Hr6_3nZ8 The basics are already implemented: - Ninja session cookie can generate a unique id. - Don't allow javascript to read the session...

Some code: AuthenticityFilter: public class AuthenticityFilter implements Filter { ``` public static final String AUTHENTICITY_TOKEN = "authenticityToken"; @Override public Result filter(FilterChain filterChain, Context context) { Session session = context.getSession(); String...

The filter assumes your request contains a parameter called "authenticityToken". Authenticity token is generated and stored in the session via session.getAuthenticityToken() (already implemented). But you have to include the parameter...

hmm... in theory yes. But I think that's imperfect. getAuthenticityToken creates a new token when it's absent. session.___AT (in your view) does not do that. So if you just include...

That's because it's implemented as map and not as object. Have a look at: https://github.com/ninjaframework/ninja/blob/develop/ninja-core/src/main/java/ninja/template/TemplateEngineFreemarker.java lin 239: if (!context.getSession().isEmpty()) { map.put("session", context.getSession().getData()); } That puts the map of session into...

Yes... totally agree - and that's really missing. I guess there should be 1) a helper that generates input type="hidden" name="atoken" value="${atoken}" ] 2) A simple way to get hold...

Cool... Let us know if we can help :)