Closed simonhir closed 21 hours ago
Describe the bug
When using the /clients or /public gateway routes you still get cookies set which is not required for both.
/clients
/public
To Reproduce
/clients/digitalwf-backend-service/rest
Set-Cookie
Expected behavior
You can call both routes as before but there is no csrf or auth cookie set
Screenshots
Additional context
Das scheint aktuell nicht umsetzbar:
https://github.com/spring-projects/spring-security/issues/6552
https://stackoverflow.com/questions/56056404/disable-websession-creation-when-using-spring-security-with-spring-webflux/67005365#67005365
Will be done within https://github.com/it-at-m/refarch/issues/135
Describe the bug
When using the
/clients
or/public
gateway routes you still get cookies set which is not required for both.To Reproduce
/clients
-Route (i.e./clients/digitalwf-backend-service/rest
) or/public
-RouteSet-Cookie
-header back with the auth and/or csrf cookie containedExpected behavior
You can call both routes as before but there is no csrf or auth cookie set
Screenshots
Additional context