Skip to content

feat: Remove custom CSRF implementation in place of Quarkus impl

Martin Lowe requested to merge malowe/main/testing-add-cookies into main
  • feat: Remove custom CSRF implementation in place of Quarkus impl

This change removes all custom CSRF implementations and replaces them with the Quarkus implementation, which is a hardened and secure cookie based implementation. This will use HTTPOnly session cookies to provide safe multi pod access to the CSRF token, and reduce risk associated with tokens and retaining user data for any amount of time.

Resolves #120

Merge request reports

Loading