Skip to content

Disable CSRF if Reactive Bearer Token request #5710

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Closed
jzheaux opened this issue Aug 21, 2018 · 0 comments · Fixed by #5730
Closed

Disable CSRF if Reactive Bearer Token request #5710

jzheaux opened this issue Aug 21, 2018 · 0 comments · Fixed by #5730
Assignees
@jzheaux
Labels
in: oauth2 An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)
Milestone
5.1.0.RC2

Comments

@jzheaux
Copy link
Contributor

jzheaux commented Aug 21, 2018

No description provided.

@jzheaux jzheaux added Reactive in: oauth2 An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose) labels Aug 21, 2018
@jzheaux jzheaux added this to the 5.1.0.RC2 milestone Aug 21, 2018
@rwinch rwinch modified the milestones: 5.1.0.RC2, General Backlog Aug 21, 2018
@jzheaux jzheaux modified the milestones: General Backlog, 5.1.0.RC2 Aug 21, 2018
@jzheaux jzheaux self-assigned this Aug 23, 2018
jzheaux added a commit to jzheaux/spring-security that referenced this issue Aug 23, 2018
@jzheaux
Reactive Resource Server Csrf Bypass
c5e2218 
This makes requests identified as bearer token requests skip the csrf
filter.

Fixes: spring-projectsgh-5710
@jzheaux jzheaux mentioned this issue Aug 23, 2018
Merged
rwinch pushed a commit that referenced this issue Aug 24, 2018
@jzheaux @rwinch
Reactive Resource Server Csrf Bypass
68d836d 
This makes requests identified as bearer token requests skip the csrf
filter.

Fixes: gh-5710
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@jzheaux jzheaux

Labels
in: oauth2 An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)
Projects
None yet
Milestone
5.1.0.RC2
Development

Successfully merging a pull request may close this issue.

Reactive Resource Server Csrf Bypass jzheaux/spring-security
2 participants
@rwinch @jzheaux