we have a solution where the customer is rendering a HTML5 form, fill in the form and submit. A flat PDF is created and returned to the user.
We have created a custom profile and a JSP service.
This is working in AEM 6.2 but not in 6.4 . When we click on submit-button in the form (6.4), nothing happens and in the log-file there is only two lines -
0:0:0:0:0:0:0:1 - admin 28/Feb/2019:15:45:32 +0100 "GET /content/dam/formsanddocuments/XXX/1.0/Forms/XDP/1111.xdp/jcr:content HTTP/1.1" 200 898182 "http://localhost:4502/libs/fd/fm/gui/content/forms/formmetadataeditor.html/content/dam/formsanddocum..." "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36"
0:0:0:0:0:0:0:1 - admin 28/Feb/2019:15:45:40 +0100 "HEAD /content/xfaforms/profiles/default.submit.html HTTP/1.1" 200 - "http://localhost:4502/content/dam/formsanddocuments/XXX/1.0/Forms/XDP/1111.xdp/jcr:content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36"
The only setting is in Adobe Granite CSRF Filter
where the path to the service is excluded- /content/DocServicesXXX/flatPDF.
Is there any changes how this is working from 6.2 to 6.4?
Couple of pointers:
- check/upgrade CFPs/Forms related feature packs
- enable 'debug' logs on specific packages
- enable CSRF and then check if it works fine. Not sure if the excluded content path is where form is posting otherwise, you may need to add more exclusions
- check Sling Referrer Filter configuration/methods and modify it for testing.