Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Use not depreciated WebSocket Auth #59

Open
Poeschl opened this issue Feb 20, 2024 · 0 comments
Open

Use not depreciated WebSocket Auth #59

Poeschl opened this issue Feb 20, 2024 · 0 comments
Labels
prio low This should not be worked on in the near future wontfix This should not be worked on at all

Comments

@Poeschl
Copy link
Owner

Poeschl commented Feb 20, 2024 •
edited
Loading

The latest mechanism of Spring Boot to enable the websocket security don't support disabling CSRF. Until then the depreciated AbstractSecurityWebSocketMessageBrokerConfigurer must be used.

See https://docs.spring.io/spring-security/reference/servlet/integrations/websocket.html#websocket-sameorigin-disable
@Poeschl Poeschl changed the title Java Depriciations Use @EnableWebSocketSecurity instead of AbstractSecurityWebSocketMessageBrokerConfigurer Mar 10, 2024
@Poeschl Poeschl added the prio low This should not be worked on in the near future label Mar 10, 2024
@Poeschl Poeschl changed the title Use @EnableWebSocketSecurity instead of AbstractSecurityWebSocketMessageBrokerConfigurer Use not depreciated WebSocket Auth Mar 10, 2024
@Poeschl Poeschl added the wontfix This should not be worked on at all label Mar 22, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
prio low This should not be worked on in the near future wontfix This should not be worked on at all
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
1 participant
@Poeschl