XSRF added but not implemented
This commit is contained in:
parent
b328bc30a8
commit
564d80212a
@ -64,7 +64,14 @@ public class CezenLoginSecurityChain {
|
|||||||
}))
|
}))
|
||||||
|
|
||||||
|
|
||||||
|
//temporarily disabling cross sight resource forgery
|
||||||
.csrf(AbstractHttpConfigurer::disable)
|
.csrf(AbstractHttpConfigurer::disable)
|
||||||
|
// .csrf((csrf) ->
|
||||||
|
// csrf.csrfTokenRequestHandler(requestHandler).
|
||||||
|
// ignoringRequestMatchers("/open/signup","/open/login","/user/getXSRfToken")
|
||||||
|
// //.csrfTokenRepository(new CookieCsrfTokenRepository())
|
||||||
|
// .csrfTokenRepository(cookieCsrfTokenRepo)
|
||||||
|
// )
|
||||||
//.addFilterAfter(new CsrfCookieFilter(), BasicAuthenticationFilter.class)
|
//.addFilterAfter(new CsrfCookieFilter(), BasicAuthenticationFilter.class)
|
||||||
|
|
||||||
//token generation after BasicAuthenticationFilter.class
|
//token generation after BasicAuthenticationFilter.class
|
||||||
|
|||||||
@ -29,7 +29,7 @@ public class SignUpController {
|
|||||||
// and a login route
|
// and a login route
|
||||||
@GetMapping("/login")
|
@GetMapping("/login")
|
||||||
public ReturnStatus login(){
|
public ReturnStatus login(){
|
||||||
return new ReturnStatus(false, "Login not yet implemented", "Login not yet implemented");
|
return new ReturnStatus(true, "Welcome user authenticated successfully", "");
|
||||||
}
|
}
|
||||||
|
|
||||||
|
|
||||||
|
|||||||
Loading…
Reference in New Issue
Block a user