Fix CORS request pattern matching in authenticators by nielsm5 · Pull Request #10387 · frankframework/frankframework

@nielsm5

@nielsm5

@sonarqubecloud

tnleeuw

evandongen


try {
httpSecurityConfigurer.csrf(CsrfConfigurer::disable); // Disable CSRF, post requests should be possible.
httpSecurityConfigurer.cors(CorsConfigurer::disable); // Disable CORS, post requests should be possible.

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

het pr heet 'fix cors request pattern matching' -- hier doe je toch wat anders, je zet cors helemaal uit?

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

De spring MVC filter ja. Die is voor WebService endpoints niet handig/belangrijk.
We filteren op options requests om te kijken of we iets met authenticatie moeten doen.

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Top, had ik dan in de vorige even gemist.

evandongen

@nielsm5 nielsm5 deleted the backport/9.4/fix-cors-issues branch

February 4, 2026 08:56