CookieCsrfTokenRepository

CookieCsrfTokenRepository.java

@Configuration
@EnableWebSecurity
@EnableGlobalMethodSecurity(prePostEnabled = true)
public class WebSecurityConfig extends WebSecurityConfigurerAdapter {
  @Override
  protected void configure(HttpSecurity http) throws Exception {

    final CsrfTokenRepository csrfTokenRepository = CookieCsrfTokenRepository.withHttpOnlyFalse();

    http
        .cors()
        .and()
        // enable CSRF
        .csrf().csrfTokenRepository(csrfTokenRepository)
        // ...
        ;
  }
}