BAEL-89 remove csrf disable
This commit is contained in:
parent
8daa90f3de
commit
9938a1a0c7
|
@ -16,7 +16,6 @@ public class SecurityConfig extends WebSecurityConfigurerAdapter {
|
|||
.sessionManagement()
|
||||
.sessionCreationPolicy(SessionCreationPolicy.NEVER)
|
||||
.and()
|
||||
.authorizeRequests().anyRequest().hasRole("ADMIN").and()
|
||||
.httpBasic().disable();
|
||||
.authorizeRequests().anyRequest().hasRole("ADMIN").and();
|
||||
}
|
||||
}
|
||||
|
|
|
@ -22,7 +22,6 @@ public class SecurityConfig extends WebSecurityConfigurerAdapter {
|
|||
protected void configure(HttpSecurity http) throws Exception {
|
||||
http
|
||||
.httpBasic().and()
|
||||
// .csrf().disable()
|
||||
.authorizeRequests()
|
||||
.antMatchers("/").permitAll()
|
||||
.antMatchers("/tomcat").hasRole("USER")
|
||||
|
|
Loading…
Reference in New Issue