Spring Security - Third Edition

Default CSRF support

CSRF protection is enabled by default with Java configuration. Refer to the Javadoc of csrf() for additional customizations regarding how CSRF protection is configured.

Just to be verbose in this configuration, we are going to add the CSRS method to our SecurityConfig.java file as follows:

//src/main/java/com/packtpub/springsecurity/configuration/SecurityConfig.java    @Override

    public void configure(HttpSecurity http) throws Exception {       http.csrf();    }