CsrfDsl

A Kotlin DSL to configure HttpSecurity CSRF protection using idiomatic Kotlin code.

Eleftheria Stein

5.3

Constructors

constructor()

var csrfTokenRepository: CsrfTokenRepository?

the CsrfTokenRepository to use.

var csrfTokenRequestHandler: CsrfTokenRequestHandler?

the CsrfTokenRequestHandler to use for making the CSRF token available as a request attribute

specify the RequestMatcher to use for determining when CSRF should be applied.

var sessionAuthenticationStrategy: SessionAuthenticationStrategy?

the SessionAuthenticationStrategy to use.

Disable CSRF protection

fun ignoringRequestMatchers(vararg requestMatchers: RequestMatcher)

Allows specifying HttpServletRequests that should not use CSRF Protection even if they match the requireCsrfProtectionMatcher.