This version is still in development and is not considered stable yet. For the latest stable version, please use Spring Security 6.4.1!

Testing with CSRF

Spring Security also provides support for CSRF testing with WebTestClient. For example:

  • Java

  • Kotlin

this.rest
	// provide a valid CSRF token
	.mutateWith(csrf())
	.post()
	.uri("/login")
	...
this.rest
    // provide a valid CSRF token
    .mutateWith(csrf())
    .post()
    .uri("/login")
    ...