Spring Security - Third Edition

Synchronizer token support in Spring Security

Spring Security provides synchronizer token support that is turned on by default. You might have noticed from the previous chapters that in our SecurityConfig.java file, we have disabled CSRF protection, as shown in the following code snippet:

//src/main/java/com/packtpub/springsecurity/configuration/SecurityConfig.javaprotected void configure(HttpSecurity http) throws Exception {...// CSRF protection is enabled by default.http.csrf().disable();...}

Up to this point in the book, we have disabled synchronizer token protection so we could focus on other security concerns.

If we start the application at this point, we can run through the security and there will be no synchronizer token support added ...