I'm implementing CSRF guard in my web application. I have done all the required configuration and I can see token getting generated/injected into the request header.
Let me tell you application's architecture a bit, I have JSP pages which makes call to services using Ajax to get the data and display in the UI.
My question here is "Can we protect service calls also with CSRF guard?" If it is possible then how can I do this because it is not going to
CsrfGuardFilter.java class when I'm debugging the execution.