Pass Antiforgery token with Server Bound Grid

[Chris]

I'm using asp.net mvc 4 with a server bound grid.  When the actions are posted to my controller, they do not include the antiforgery token and therefore .net throws up an error.  I've seen examples on how to pass the token with ajax bound grids, but not with server bound grids.  How would this be accomplished?

[Petur Subev]

Hello Curt,

Unfortunately the Grid does not does not offer you a way to append additional parameters to the URLs that are generated for the different links - such as paging / sorting etc.

The only work-around I can suggest you is to override the whole transport option like this before initializing the Grid:

<script type="text/javascript">
    $.extend(true, kendo.data, {
        transports: {
            "aspnetmvc-server": kendo.data.RemoteTransport.extend({
                read: function (options) {
                    var url,
                        prefix = this.options.prefix,
                        params = [prefix + "sort",
                            prefix + "page",
                            prefix + "pageSize",
                            prefix + "group",
                            prefix + "aggregate",
                            prefix + "filter"],
                        regExp = new RegExp("(" + params.join('|') + ")=[^&]*&?", "g"),
                        query;

                    query = location.search.replace(regExp, "").replace("?", "");

                    if (query.length && !(/&$/.test(query))) {
                        query += "&";
                    }

                    options = this.setup(options, "read");

                    url = options.url;

                    if (url.indexOf("?") >= 0) {
                        url += "&" + query;
                    } else {
                        url += "?" + query;
                    }

                    url += $.map(options.data, function (value, key) {
                        return key + "=" + value;
                    }).join("&");

                   //here you can try to modify the URL and REPLACE (if existing) the antiforgery token

                    location.href = url;
                }
            })
        }
    });
</script>

 

I am sorry that the server binding does not support a way to send additional parameters.

Kind Regards,
Petur Subev
the Telerik team

[Shane]

Is this still the only solution for sending the antiforgery token when using a server binding grid?  I'm just asking as it's over 2-year-old post.

[Alexander Popov]

Hello Shane,

You can try passing the token through the route values object, for example: 

.Read("ServerEditing", "Grid", new { @__RequestVerificationToken =  token})

Regards,
Alexander Popov
Telerik

[Brad]

Since this is such a common operation for both server and Ajax bound grids (post method), would it not be valuable to add a method for this?  Maybe something like this:

.Read("ServerEditing", "Grid", new { @__RequestVerificationToken =  token}).AppendRequestVerificationToken()

Just a thought.