Category "spring-security"

CookieCsrfTokenRepository allows the client to create its own Csrf Tokens

CookieCsrfTokenRepository sets a cookie and on subsequent requests it just just compares the cookie value from the client with the cookie value from the header.

@EventListener for AuthenticationSuccessEvent or InteractiveAuthenticationSuccessEvent not fired

I have this listener in the context of Spring: package listeners; import java.util.Date; import org.slf4j.Logger; import org.slf4j.LoggerFactory; import org.s

Spring Security: How to use a UserDetailsService with JwtAuthenticationProvider?

I have a REST service, written using Spring MVC. The server is an OAuth2 resource server and I am using the JwtAuthenticationProvider to have the JWT parsed and

AuthenticationSuccessEvent never fired

I writing app where user logs in using facebook. My security config/application class: @SpringBootApplication @EnableOAuth2Sso @ComponentScan(basePackages = {

spring sas 0.2.0 access_token throw 'Access is denied'

I have got the access_token from '/oauth2/token' endpoint. But when I query other custom endpoint with access_token, spring sas 0.2.0 throw 'Access is denied'.

How to return 404 for pages that do not exist when using Grails Spring Security Plugin

I'm using Grails 3.3.9 with the spring security core plugin 3.2.3 to secure a website. The problem I have is that now users receive a 403 for pages that do not