File tree Expand file tree Collapse file tree 2 files changed +4
-2
lines changed
main/java/org/springframework/security/web/server/csrf
test/java/org/springframework/security/web/server/csrf Expand file tree Collapse file tree 2 files changed +4
-2
lines changed Original file line number Diff line number Diff line change @@ -130,7 +130,7 @@ public static void skipExchange(ServerWebExchange exchange) {
130
130
private Mono <Void > validateToken (ServerWebExchange exchange ) {
131
131
return this .csrfTokenRepository .loadToken (exchange )
132
132
.switchIfEmpty (Mono
133
- .defer (() -> Mono .error (new CsrfException ("CSRF Token has been associated to this client " ))))
133
+ .defer (() -> Mono .error (new CsrfException ("An expected CSRF token cannot be found " ))))
134
134
.filterWhen ((expected ) -> containsValidCsrfToken (exchange , expected ))
135
135
.switchIfEmpty (Mono .defer (() -> Mono .error (new CsrfException ("Invalid CSRF Token" )))).then ();
136
136
}
Original file line number Diff line number Diff line change @@ -64,7 +64,7 @@ public class CsrfWebFilterTests {
64
64
65
65
private MockServerWebExchange get = MockServerWebExchange .from (MockServerHttpRequest .get ("/" ));
66
66
67
- private ServerWebExchange post = MockServerWebExchange .from (MockServerHttpRequest .post ("/" ));
67
+ private MockServerWebExchange post = MockServerWebExchange .from (MockServerHttpRequest .post ("/" ));
68
68
69
69
@ Test
70
70
public void filterWhenGetThenSessionNotCreatedAndChainContinues () {
@@ -91,6 +91,8 @@ public void filterWhenPostAndEstablishedCsrfTokenAndRequestMissingTokenThenCsrfE
91
91
Mono <Void > result = this .csrfFilter .filter (this .post , this .chain );
92
92
StepVerifier .create (result ).verifyComplete ();
93
93
assertThat (this .post .getResponse ().getStatusCode ()).isEqualTo (HttpStatus .FORBIDDEN );
94
+ StepVerifier .create (this .post .getResponse ().getBodyAsString ())
95
+ .assertNext (b -> assertThat (b ).contains ("An expected CSRF token cannot be found" ));
94
96
}
95
97
96
98
@ Test
You can’t perform that action at this time.
0 commit comments