OpenID-Connect-Java-Spring-.../openid-connect-server-webapp
Mark Janssen b5c298e0ca Remove legacy CSRF protection for approve page
Instead, we rely on the Spring Security CSRF protection, like we already do for the login page. Additionally, we remove the authentication check in`isApproved`, because this is already done by Spring Security (and if not, we have bigger problems to worry about).
2015-10-09 17:09:46 +02:00
..
src/main Remove legacy CSRF protection for approve page 2015-10-09 17:09:46 +02:00
.gitignore refactored project into four modules: 2013-09-23 17:19:09 -04:00
pom.xml [maven-release-plugin] prepare for next development iteration 2015-10-02 18:53:48 -04:00