From 33b266e8fa9e35625478ac52882cdb6e4ba8787d Mon Sep 17 00:00:00 2001 From: Josh Cummings Date: Tue, 18 Apr 2023 11:33:48 -0600 Subject: [PATCH] Add Boot Link Issue gh-13062 --- docs/modules/ROOT/pages/servlet/authentication/logout.adoc | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docs/modules/ROOT/pages/servlet/authentication/logout.adoc b/docs/modules/ROOT/pages/servlet/authentication/logout.adoc index c9091ca7c3..f539123ba7 100644 --- a/docs/modules/ROOT/pages/servlet/authentication/logout.adoc +++ b/docs/modules/ROOT/pages/servlet/authentication/logout.adoc @@ -19,7 +19,7 @@ The rest of this section covers a number of use cases for you to consider: [[logout-java-configuration]] == Understanding Logout's Architecture -When you include the `spring-boot-starter-security` dependency or use the `@EnableWebSecurity` annotation, Spring Security will add its logout support and by default respond both to `GET /logout` and `POST /logout`. +When you include {spring-boot-reference-url}using.html#using.build-systems.starters[the `spring-boot-starter-security` dependency] or use the `@EnableWebSecurity` annotation, Spring Security will add its logout support and by default respond both to `GET /logout` and `POST /logout`. If you request `GET /logout`, then Spring Security displays a logout confirmation page. Aside from providing a valuable double-checking mechanism for the user, it also provides a simple way to provide xref:servlet/exploits/csrf.adoc[the needed CSRF token] to `POST /logout`.