Cwikius-Spring/spring-security
1
0
Fork 0
mirror of synced 2026-08-05 09:47:05 +00:00
Code Issues Packages Projects Releases Wiki Activity

Logout requires POST

Browse Source 
Issue: gh-4734
This commit is contained in:
Rob Winch
2017-10-28 23:35:17 -05:00
parent 8da2c7f657
commit 0734d70d02
2 changed files with 13 additions and 29 deletions
Download Patch File Download Diff File Expand all files Collapse all files
web/src/main/java/org/springframework/security/web/server/authentication/logout/LogoutWebFilter.java
+2 -1
View File
@@ -16,6 +16,7 @@
package org.springframework.security.web.server.authentication.logout;
import org.springframework.http.HttpMethod;
import org.springframework.security.core.context.ReactiveSecurityContextHolder;
import org.springframework.util.Assert;
import reactor.core.publisher.Mono;
@@ -46,7 +47,7 @@ public class LogoutWebFilter implements WebFilter {
private ServerLogoutSuccessHandler serverLogoutSuccessHandler = new RedirectServerLogoutSuccessHandler();
private ServerWebExchangeMatcher requiresLogout = ServerWebExchangeMatchers
.pathMatchers("/logout");
.pathMatchers(HttpMethod.POST, "/logout");
@Override
public Mono<Void> filter(ServerWebExchange exchange, WebFilterChain chain) {