Skip to content

Instantly share code, notes, and snippets.

@geapi
Created November 18, 2016 19:03
Show Gist options
  • Save geapi/444c0b43f26549ac25ba74954aa383d3 to your computer and use it in GitHub Desktop.
Save geapi/444c0b43f26549ac25ba74954aa383d3 to your computer and use it in GitHub Desktop.
added Csrf tokenability to DevelopmentSecurityConfig
@Configuration
@Profile("development")
public class DevelopmentSecurityConfig extends WebSecurityConfigurerAdapter {
@Bean
public CsrfTokenRepository csrfTokenRepository() {
return CookieCsrfTokenRepository.withHttpOnlyFalse();
}
@Override
public void configure(HttpSecurity http) throws Exception {
http
.httpBasic()
.and()
.csrf()
.csrfTokenRepository(csrfTokenRepository())
.and()
.authorizeRequests()
.anyRequest()
.authenticated();
}
@Override
public void configure(AuthenticationManagerBuilder auth) throws Exception {
auth
.inMemoryAuthentication()
.withUser("user").password("password").roles("USER");
}
}
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment