The whole point of checking the validity of the token wth isTokenValid is to avoid doing any processing if the token is not valid and process the action only if the token is valid. So, your code should look something like this:
I dont think you need to manually set the Token in the Jsp. Struts would do it automatically for you. The only thing you need to do is to check the validity of the Token in the Action class as specified in the above post.
I understand that I don't need to manually set the token in my page. If I dont do that the isTokenValid(request) method always returns false. In SetupFormAction I query DB to obtain data to display on page I then call saveToken(request); and I lastly I forward to jsp. ProcessFormAction is called if user submits changes to the data by clicking submit in the jsp. It checks isTokenValid(request). If it is, it saves changes to DB and forwards back to SetupFormAction. If the token is not valid it simply forwards back to SetupFormAction. My problem is that isTokenValid(request) always returns false. Once I included the code below it works.
Im handling the setup in one action and the save in another action could this be a problem? [ December 02, 2006: Message edited by: john mattucci ]
Does your forward from the setupFormAction specify redirect="true"? If so, that's the problem. If redirect="true" is specified, a message is sent to the browser to redirect to the JSP, meaning the display of the JSP occurs in a different request than the setupFormAction. A token is good only for one request.
hmmm...Is your jsp using an html:form tag? If you have called saveToken in your setup action and you are using a html:form tag then a hidden input value will be generated for you. If you view the source in your browser you should see something like this:
I'm handling the setup in one action and the save in another action could this be a problem?
