Skip to content
GitLab
Projects Groups Snippets
  • /
  • Help
    • Help
    • Support
    • Community forum
    • Submit feedback
  • Sign in
  • E eclipsefdn-api-common
  • Project information
    • Project information
    • Activity
    • Labels
    • Members
  • Repository
    • Repository
    • Files
    • Commits
    • Branches
    • Tags
    • Contributors
    • Graph
    • Compare
    • Locked Files
  • Issues 14
    • Issues 14
    • List
    • Boards
    • Service Desk
    • Milestones
    • Iterations
    • Requirements
  • Merge requests 2
    • Merge requests 2
  • Deployments
    • Deployments
    • Releases
  • Monitor
    • Monitor
    • Metrics
    • Incidents
  • Analytics
    • Analytics
    • Value stream
    • Code review
    • Insights
    • Issue
    • Repository
  • Wiki
    • Wiki
  • Snippets
    • Snippets
  • Activity
  • Graph
  • Create a new issue
  • Commits
  • Issue Boards
Collapse sidebar
  • Eclipse FoundationEclipse Foundation
  • IT
  • APIs
  • eclipsefdn-api-common
  • Merge requests
  • !3

Add CSRF filter + response validation to the core Quarkus lib

  • Review changes

  • Download
  • Email patches
  • Plain diff
Merged Martin Lowe requested to merge malowe/master/3 into master Feb 03, 2021
  • Overview 0
  • Commits 3
  • Changes 17

This enables a CSRF feature that can be used on any app that makes use of this lib. Enable the csrf through security.csrf.enabled, and configure security.csrf.salt to strengthen the security of the app.

Once done, any mutator requests become guarded by CSRF. Other requests can manually call the CSRF helper to validate a request as done in the test resource.

Additionally, added authenticated test profile for testing security/authentication layer separate from the rest of the application. Authentication has been disabled by default, and can be enabled by setting the field in the application.properties file of the app.

Signed-off-by: Martin Lowe martin.lowe@eclipse-foundation.org

Assignee
Assign to
Reviewers
Request review from
Time tracking
Source branch: malowe/master/3

Copyright © Eclipse Foundation, Inc. All Rights Reserved.     Privacy Policy | Terms of Use | Copyright Agent