[Port dspace-7_x] Add a GET `/csrf` endpoint to allow for forcing refresh of CSRF token

DSpace / DSpace

(Official) The DSpace digital asset management system that powers your Institutional Repository

https://wiki.lyrasis.org/display/DSDOC7x/

BSD 3-Clause "New" or "Revised" License

855 stars 1.29k forks source link

Open tdonohue opened 1 month ago

tdonohue commented 1 month ago

Ports /api/security/csrf endpoint from #9321 (see commits 3b461417ed8a92a0fbdc6a373997d33f27bc9d18 and 41fe757 ) to dspace-7_x
Fixes #9236 for 7.x (requires frontend changes as well)
REST Contract: https://github.com/DSpace/RestContract/pull/269

Add /api/security/csrf endpoint which can be used to automatically obtain or refresh CSRF token

tdonohue commented 1 month ago

👍 Tested this locally with https://github.com/DSpace/dspace-angular/pull/3063 and it's working the same as it does on main / pre-8.0.