FINERACT-724 disable csrf on oauth configuration

2019-11-21 11:05:11 +02:00
parent 69f650654f
commit 33acc37a76
1 changed files with 1 additions and 0 deletions
@@ -118,6 +118,7 @@
 		<http pattern="/api/oauth/token" create-session="stateless"
 			entry-point-ref="oauthAuthenticationEntryPoint" use-expressions="true"
 			authentication-manager-ref="clientAuthenticationManager">
+            <csrf disabled="true"/>
 			<intercept-url pattern="/api/oauth/token" method="OPTIONS"
 				access="permitAll" requires-channel="https" />
 			<intercept-url pattern="/api/oauth/token" method="POST"