Skip to content

Spring boot OAuth2 application meant to propose CSRF support fo HAL browser.

Notifications You must be signed in to change notification settings

javiersvg/hal-browser-zuul-issue-demo

Repository files navigation

Build Status

Spring Boot and OAuth2

Spring boot OAuth2 application based on this tutorial. Composed by the following modules:

Installation

jdk 1.8 required mongodb required

Usage

  • build: ./mvnw clean install
  • start proxy: ./mvnw -pl proxy clean spring-boot:run
  • start client: ./mvnw -pl client clean spring-boot:run
  • access: http://localhost:8080/client

Steps to reproduce the issue

Once you ahve loged in and in the HAL browser POST a new customer with any given name and you shall get the following error:

{
  "timestamp": 1488222940259,
  "status": 403,
  "error": "Forbidden",
  "message": "Invalid CSRF Token 'null' was found on the request parameter '_csrf' or header 'X-XSRF-TOKEN'.",
  "path": "/client/customers"
}

About

Spring boot OAuth2 application meant to propose CSRF support fo HAL browser.

Topics

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published