nifi/nifi-commons/nifi-web-utils
exceptionfactory e16a6c2b89 NIFI-9241 Refactored CSRF mitigation using random Request-Token
- Replaced use of Authorization header with custom Request-Token header for CSRF mitigation
- Added Request-Token cookie for CSRF mitigation
- Replaced session storage of JWT with expiration in seconds
- Removed and disabled CORS configuration
- Disabled HTTP OPTIONS method
- Refactored HTTP Proxy URI construction using RequestUriBuilder

Signed-off-by: Nathan Gough <thenatog@gmail.com>

This closes #5417.
2021-09-30 20:36:15 -04:00
..
src NIFI-9241 Refactored CSRF mitigation using random Request-Token 2021-09-30 20:36:15 -04:00
pom.xml NIFI-8767-RC2 prepare for next development iteration 2021-07-10 12:17:09 -07:00