CBSNexora/cbsnexora-backend
4
0
Fork 0
Code Issues Pull Requests Actions 2 Packages Projects Releases Wiki Activity

FINERACT-724 disable csrf on oauth configuration

Browse Source
This commit is contained in:
ibondarenko
2019-11-21 11:05:11 +02:00
parent 69f650654f
commit 33acc37a76
1 changed files with 1 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
fineract-provider/src/main/resources/META-INF/spring/securityContext.xml
+1
View File
@@ -118,6 +118,7 @@
<http pattern="/api/oauth/token" create-session="stateless" <http pattern="/api/oauth/token" create-session="stateless"
entry-point-ref="oauthAuthenticationEntryPoint" use-expressions="true" entry-point-ref="oauthAuthenticationEntryPoint" use-expressions="true"
authentication-manager-ref="clientAuthenticationManager"> authentication-manager-ref="clientAuthenticationManager">
<csrf disabled="true"/>
<intercept-url pattern="/api/oauth/token" method="OPTIONS" <intercept-url pattern="/api/oauth/token" method="OPTIONS"
access="permitAll" requires-channel="https" /> access="permitAll" requires-channel="https" />
<intercept-url pattern="/api/oauth/token" method="POST" <intercept-url pattern="/api/oauth/token" method="POST"