Spring CSRF 403 Session expired Internet Explorer 9-11
<p>First of all: disabling CSRF protection is not an option.</p>

<p>To clarify the dependencies</p>

<pre><code>compile 'org.springframework:spring-webmvc:4.2.5.RELEASE',
        'org.thymeleaf:thymeleaf-spring4:2.1.4.RELEASE',
        'com.fasterxml.jackson.core:jackson-databind:2.7.3',
        'com.google.guava:guava:19.0',
        'org.springframework.security:spring-security-config:4.0.4.RELEASE',
        'org.springframework.security:spring-security-web:4.0.4.RELEASE',
        'org.thymeleaf.extras:thymeleaf-extras-springsecurity4:2.1.2.RELEASE'
</code></pre>

<p>During a presentation of the milestone of our new app with Internet Explorer 11 suddenly I was not able to login any more. So I was logged in, I manually logged out and since then I'm unable to login. Also after one day and a complete shut down of my computer it's not working any more.</p>

<p>At the same time login is working fine with Chrome, Firefox, Opera and Safari and also the customer can log in with (drum roll) Internet Explorer.</p>

<p>It is really annoying. So what other IE users will have this problem too?</p>

<p>The login process itself is using AJAX. It's a PUT request.<br>
The Answer in this error case is HTML containing this text <code>HTTP Status 403 - Expected CSRF token not found. Has your session expired?</code> and more.</p>

<p>If some one wants to test it: <a href="http://int.vr-karriere.de/" rel="nofollow">http://int.vr-karriere.de/</a><br>
The Login is "Anmelden" (German App)</p>

<p>You can use any user and password.<br>
On success you'll see "Der Benutzername oder das Password war falsch." because the server processed the request.<br>
On error you just see "Error during login"</p>

<p>I have no idea why IE behaves that bad for me.</p>