From 33acc37a764b5b30fce5cbfa8b34239680d2c381 Mon Sep 17 00:00:00 2001
From: ibondarenko <ivan.bondarenko@zorallabs.com>
Date: Thu, 21 Nov 2019 11:05:11 +0200
Subject: [PATCH] FINERACT-724 disable csrf on oauth configuration

---
 .../src/main/resources/META-INF/spring/securityContext.xml       | 1 +
 1 file changed, 1 insertion(+)

diff --git a/fineract-provider/src/main/resources/META-INF/spring/securityContext.xml b/fineract-provider/src/main/resources/META-INF/spring/securityContext.xml
index 140a3ea50..20c08160c 100644
--- a/fineract-provider/src/main/resources/META-INF/spring/securityContext.xml
+++ b/fineract-provider/src/main/resources/META-INF/spring/securityContext.xml
@@ -118,6 +118,7 @@
 		<http pattern="/api/oauth/token" create-session="stateless"
 			entry-point-ref="oauthAuthenticationEntryPoint" use-expressions="true"
 			authentication-manager-ref="clientAuthenticationManager">
+            <csrf disabled="true"/>
 			<intercept-url pattern="/api/oauth/token" method="OPTIONS"
 				access="permitAll" requires-channel="https" />
 			<intercept-url pattern="/api/oauth/token" method="POST"