rwinch/spring-security5-reactive-bits

NPE

Opened this issue · 2 comments

daggerok commented

Hello Rob,

I've got npe here:

https://github.com/rwinch/spring-security5-reactive-parts/blob/1deff55b3ea94f5e2568761964ab5e5e6bc9b0d8/src/main/java/sample/security/SecurityControllerAdvice.java#L20

unless spend more time to find that there are two CsrfToken available:

org.springframework.security.web.csrf.CsrfToken
org.springframework.security.web.server.csrf.CsrfToken

as far returns Object, it not clear to figure out in time. I have checked reference and didn't found anything.. it would be nice to have some note regarding that reactive CsrfToken stuff

Can I help with it somehow?
Thanks

Regards,
Maksim

rwinch commented

org.springframework.security.web.server.csrf.CsrfToken is the one to use. Can you explain how to reproduce the issue?

daggerok commented

Hi,

org.springframework.security.web.server.csrf.CsrfToken is the one to use

yes, and now I know it.. think is: I just tried do it by my own during watching your talk, and had no chance to figure out form reference which one of these I must use

Can you explain how to reproduce the issue?

sure, if you try use wrong one: org.springframework.security.web.csrf.CsrfToken

ps: I have seen a few questions on stackoverflow depends on Csrf and using it with other template engines (not JSP or Thymeleaf), so by creating an issue, I just proposing add some reference regarding that Csrf knowledge in reactive webflux webapp.