Skip to content

Commit

Permalink
Fix reference to CookieServerCsrfTokenRepository
Browse files Browse the repository at this point in the history
Issue gh-11959
  • Loading branch information
sjohnr committed Nov 20, 2022
1 parent 4442a61 commit 3d2be56
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion docs/modules/ROOT/pages/migration/reactive.adoc
Original file line number Diff line number Diff line change
Expand Up @@ -126,7 +126,7 @@ If configuring CSRF BREACH protection gives you trouble, take a look at these sc

==== I am using AngularJS or another Javascript framework

If you are using AngularJS and the https://angular.io/api/common/http/HttpClientXsrfModule[HttpClientXsrfModule] (or a similar module in another framework) along with `CookieCsrfTokenRepository.withHttpOnlyFalse()`, you may find that automatic support no longer works.
If you are using AngularJS and the https://angular.io/api/common/http/HttpClientXsrfModule[HttpClientXsrfModule] (or a similar module in another framework) along with `CookieServerCsrfTokenRepository.withHttpOnlyFalse()`, you may find that automatic support no longer works.

In this case, you can configure Spring Security to validate the raw `CsrfToken` from the cookie while keeping CSRF BREACH protection of the response using a custom `ServerCsrfTokenRequestHandler` with delegation, like so:

Expand Down

0 comments on commit 3d2be56

Please sign in to comment.