Add CSRF filter + response validation to the core Quarkus lib

This enables a CSRF feature that can be used on any app that makes use of this lib. Enable the csrf through security.csrf.enabled, and configure security.csrf.salt to strengthen the security of the app.

Once done, any mutator requests become guarded by CSRF. Other requests can manually call the CSRF helper to validate a request as done in the test resource.

Additionally, added authenticated test profile for testing security/authentication layer separate from the rest of the application. Authentication has been disabled by default, and can be enabled by setting the field in the application.properties file of the app.

Signed-off-by: Martin Lowe martin.lowe@eclipse-foundation.org

added 1 commit

• 947fc66f - Add call to get reference to DB object

Compare with previous version

added 12 commits

• 947fc66f...82b48092 - 10 commits from branch master
• eb28414f - Add CSRF filter + response validation to the core Quarkus lib
• 0d314806 - Add call to get reference to DB object

Compare with previous version

added 1 commit

• 7dec6db7 - Fix bad type check in equals for BareNode class

Compare with previous version

approved this merge request

merged

mentioned in commit ec658765