Blog

How does Spring Security prevent application from CSRF?

Question #

When I wrote a Spring Security & Oauth2 web application according to this official guide with Spring Boot 3.0.6 and Spring Security 6.0.3, I encountered a problem when I configured Spring Security CSRF:

 1@Override
 2protected void configure(HttpSecurity http) throws Exception {
 3	// @formatter:off
 4    http
 5        // ... existing code here
 6        .csrf(c -> c
 7            .csrfTokenRepository(CookieCsrfTokenRepository.withHttpOnlyFalse())
 8        )
 9        // ... existing code here
10    // @formatter:on
11}
Read More ...