Warning: file_get_contents(/data/phpspider/zhask/data//catemap/9/java/378.json): failed to open stream: No such file or directory in /data/phpspider/zhask/libs/function.php on line 167

Warning: Invalid argument supplied for foreach() in /data/phpspider/zhask/libs/tag.function.php on line 1116

Notice: Undefined index: in /data/phpspider/zhask/libs/function.php on line 180

Warning: array_chunk() expects parameter 1 to be array, null given in /data/phpspider/zhask/libs/function.php on line 181
Java Spring webflux安全-使用属性禁用csrf_Java_Spring Security_Spring Webflux - Fatal编程技术网

Java Spring webflux安全-使用属性禁用csrf

Java Spring webflux安全-使用属性禁用csrf,java,spring-security,spring-webflux,Java,Spring Security,Spring Webflux,我有一个SpringWebFlux安全性,如下所示,并希望使用属性控制CSRF。我如何在这里添加单独检查CSRF的if @Bean public SecurityWebFilterChain securitygWebFilterChain(ServerHttpSecurity http) { return http.authorizeExchange().matchers(PathRequest.toStaticResources().atCommonLocations()).permi

我有一个SpringWebFlux安全性,如下所示,并希望使用属性控制CSRF。我如何在这里添加单独检查CSRF的if

@Bean
public SecurityWebFilterChain securitygWebFilterChain(ServerHttpSecurity http) {
    return http.authorizeExchange().matchers(PathRequest.toStaticResources().atCommonLocations()).permitAll()
        //.pathMatchers("/register", "/login").permitAll()
        .anyExchange().authenticated()
        .and().formLogin()
        .securityContextRepository(securityContextRepository())
        .and()
        .exceptionHandling()
        .accessDeniedHandler(new HttpStatusServerAccessDeniedHandler(HttpStatus.BAD_REQUEST))
        .and().csrf().disable()
        .build();
}

您只需添加如下内容:

// All your stuff up here then

if(!csrfEnabled) {
    http.csrf().disable();
}

return http.build();