Issue Summary

JIRA doesn't correctly create a session token when you access the <Jira URL>/projects/<Project key>/issues page prior to login. If you directly click on the create button and try to attach an attachment a missing token error is thrown. This is rectified by cancelling the issue creation or navigating to the dashboard.

Steps to Reproduce

1. Log off from Jira
2. Go to <Jira URL>/projects/<Project key>/issues
   • after login automatic redirected to <Jira url>/projects/<Project key>/issues/<Issue key>?filter=allopenissues
3. Click create button
4. Try to attach a file

Expected Results

Attachment is attached.

Actual Results

An error is thrown:
JIRA could not attach the file as there was a missing token. Please try attaching the file again.

Note on fix

xsrf-token-addition filter was moved before Dispatcher so in case request is flushed, it will have all necessary XSRF headers.

Workaround

Cancel the issue creation and try again.