I am using SSO and preAuthenticated Filter in my micro services. Micro services are built using spring boot and are stateless in nature. How can I apply CSRF protection across all micro services using spring security. Please let me know if any solution is available to implement CSRF for this scenario.
Spring boot micro services with pre-Authenticated filter using CSRF protection
165 Views Asked by Prateek At
1
There are 1 best solutions below
Related Questions in SPRING-BOOT
- Timing Issue with Spring Boot Annotation Configuration
- LightAdmin - Customise parsing DateTime with app timezone
- Creating distribution with repackaged spring boot jar using gradle application plugin
- Spring Boot MVC non-role based security
- Add JVM args to spring boot application
- The method and() is undefined for the type HttpSecurity
- swagger ui not working for swagger version 2
- Spring IO Platform 2.0 - Themes/Changes?
- JPA findDistinctPropertyBy magic method doesn't work as expected when using spring-boot-starter-jpa
- Spring boot check external service status on boot
- Running a specific spring batch job amongst several jobs contained withing a spring boot fat jar
- Adding security to rest api service built with Spring Boot app
- Spring Redirecting from Http to Https Breaks Rest Controller Test
- Service not starting using Spring-boot during integration tests
- Spring Boot Actuator Health Returning DOWN
Related Questions in SINGLE-SIGN-ON
- App will throw exception at when I first login when device SSO is enabled
- LDAP user attributes from CAS
- Single Sign On service hangs when configuring it
- Single Sign out in All application using Auth0
- How to logout from Bluemix Single Sign On service?
- How to add users to Cloud Directory via API?
- WSO2 IS - Do a Single Logout using the IdentitySAMLSSOService
- Skip login on MVC 3 application (SSO)
- Service broker error when adding Single Sign On service
- SAML service provider signature verification
- SAML v2 forms auth
- Combining custom application authentication with JAVA EE security. Possible?
- Bluemix Single Sign On service: Node.js code for getting the currently logged in userid?
- Apache - Configuring mod_auth_sspi.so
- Single Sign-On in Windows Applications using AD login
Related Questions in CSRF
- CSRFProtector PHP library won't submit any form data
- Can I use plone.protect 3.0 with Plone 4.3?
- CORS and CSRF(XSRF)
- XHR2 file upload to subdomain token mismatch in Laravel5.1/nginx upload module
- Laravel X-CSRF-Token mismatch with POSTMAN
- Should all the form's submit work after a valid one submit with CSRF?
- Does an anonymous comment/post form need csrf token? If not why does SO use it and how to implement it?
- How to know if my CSRF is working?
- Csurf invalid csrf token Express / nodejs
- Django CSRF cookie not set error if there is cookie value starting with square brackets '['
- Invalid authentication token after session timeout
- Is Encrypted Token Pattern CSRF protection immune to BREACH attack?
- Verifying that Play's CSRF protection is working
- Would I need CSRF if using JWT?
- Django Rest Framework remove csrf
Related Questions in MICROSERVICES
- How can microservices be truly independent when using an ESB (i.e. MassTransit)?
- Microservices and cloud resource limitations
- What's the correct way to embed a remote AngularJS application into a webpage?
- Dropwizard Jersey Client Sample
- Docker auto spawning required connected container types on demand
- Micro Service cross service dependencies
- Keep microservices data consistent
- Setting up rabbitMQ on docker with python
- Adding an item in a microservice, with reference to another one
- Spray microservice assembly deduplicate
- How do you manage per-environment data in Docker-based microservices?
- How to get a visualization of cross-app Spring Integration flow?
- Microservices authentication
- Building authentication with Microservices Architecture
- Microservices service registry registration and discovery
Related Questions in PRE-AUTHENTICATION
- Access the underlying Request(WebRequest or HTTPRequest) object in WCF for Digest PreAuthentication
- Spring Security Java Config
- Spring Security Preauth "filters=none" not working
- Spring MVC 2.5 - remember me with custom pre authentication filter
- Spring security PreAuthentication Filter asks for AuthenticationEntryPoint
- IllegalStateException after trying to access a specific URL with AbstractPreAuthenticatedProcessingFilter implementation
- PreAuthenticatedAuthenticationProvider UserDetailsService how to catch the right exception
- Java Kerberos Preauthentication Error
- Spring Security - conditionally use form-login if external auth fails / doesn't exist
- Creating Pre-Authenticated Request in OCI
- AWS Cognito Pre-Authentication lambda trigger using .Net Core 3 - returns an 'InvalidLambdaResponse' exception
- How do I create Request-Header Authentication (Siteminder) java config class
- Need to Pass the 'value' to my @CustomPreAuthorize annotation and use it in @PreAuthorize("hasAuthority(@myservice.check(#value))")
- How to bypass form login filter if pre-authentication was successful in spring?
- Spring boot micro services with pre-Authenticated filter using CSRF protection
Trending Questions
- UIImageView Frame Doesn't Reflect Constraints
- Is it possible to use adb commands to click on a view by finding its ID?
- How to create a new web character symbol recognizable by html/javascript?
- Why isn't my CSS3 animation smooth in Google Chrome (but very smooth on other browsers)?
- Heap Gives Page Fault
- Connect ffmpeg to Visual Studio 2008
- Both Object- and ValueAnimator jumps when Duration is set above API LvL 24
- How to avoid default initialization of objects in std::vector?
- second argument of the command line arguments in a format other than char** argv or char* argv[]
- How to improve efficiency of algorithm which generates next lexicographic permutation?
- Navigating to the another actvity app getting crash in android
- How to read the particular message format in android and store in sqlite database?
- Resetting inventory status after order is cancelled
- Efficiently compute powers of X in SSE/AVX
- Insert into an external database using ajax and php : POST 500 (Internal Server Error)
Popular Questions
- How do I undo the most recent local commits in Git?
- How can I remove a specific item from an array in JavaScript?
- How do I delete a Git branch locally and remotely?
- Find all files containing a specific text (string) on Linux?
- How do I revert a Git repository to a previous commit?
- How do I create an HTML button that acts like a link?
- How do I check out a remote Git branch?
- How do I force "git pull" to overwrite local files?
- How do I list all files of a directory?
- How to check whether a string contains a substring in JavaScript?
- How do I redirect to another webpage?
- How can I iterate over rows in a Pandas DataFrame?
- How do I convert a String to an int in Java?
- Does Python have a string 'contains' substring method?
- How do I check if a string contains a specific word?
You are probably looking for a proxy server. Take a look at Zuul and its security filters:
https://github.com/spring-cloud/spring-cloud-netflix/issues/796
https://github.com/spring-cloud/spring-cloud-security/issues/88