Skip to content

Conversation

SanderKondratjevNortal
Copy link

Signed-off-by: Sander Kondratjev [email protected]

@SanderKondratjevNortal SanderKondratjevNortal changed the base branch from main to web-eid-mobile August 13, 2025 12:26
Copy link

…WebEidChallengeNonceFilter to post. Index js method to POST with csrf. Remove @secured and @EnableMethodSecurity. Remove WebMvcConfigurer and view controllers from ApplicationConfiguration. Return auth_uri as JSON map. Constant name to OBJECT_MAPPER. Remove unnecessary shouldNotFilterAsyncDispatch override. Inline CSRF token and header directly in login page script. Show mobileAuthError message on login page.
…. Remove unnecessary permitAll matchers for filter-handled auth endpoints. Unify filter registration. Remove cookieFlagsInitializer. Format isMobileDevice block for readability. Rename matcher to requestMatcher in filters for consistency and clarity. Remove unnecessary WebAuthenticationDetails from token in login filter. Remove redundant ChallengeNonceStore from WebEidMobileAuthInitFilter. Fix tests. Use signing cert for ObjectMother.
…esponse.java. Remove unnecessary /error permitAll. Rename JSON constant to OBJECT_WRITER and other strings to constant. Inline ChallengeDTO.
…x CSRF header and token order in login page HTML template. Use records AuthPayload and AuthUri instead of Map.of.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant