fix forms to automatically generate csrf tokens

Co-authored-by: Christoph <tobi@urpost.de>
2020-03-26 18:21:52 +01:00
parent 832a03c82f
commit 853a5bcb03
9 changed files with 40 additions and 28 deletions
--- a/src/main/java/mops/gruppen2/security/SecurityConfig.java
+++ b/src/main/java/mops/gruppen2/security/SecurityConfig.java
@ -64,11 +64,7 @@ class SecurityConfig extends KeycloakWebSecurityConfigurerAdapter {
            .antMatchers("/actuator/**")
            .hasRole("monitoring")
            .anyRequest()
-            .permitAll()
-            .and()
-            .csrf()
-            .ignoringAntMatchers("/gruppen2/createOrga")
-            .ignoringAntMatchers("/gruppen2/details/members/addUsersFromCsv");
+            .permitAll();
    }

    /**