Hi Dr. Sun,

I am getting the following error when trying to upload files:

HTTP Status 403 - Invalid CSRF Token 'null' was found on the request parameter '_csrf' or header 'X-CSRF-TOKEN'.

I have put the CSRF token in both the url as a parameter and as a hidden field and still get the same error. In my form I am uploading the cv, Rstatement and Tstatement in one form. Does it require a token for each Multipart object? Should i be uploading each document individually? The upload and download use to work before adding spring security.