in src/main/java/com/epam/digital/data/platform/starter/security/WebSecurityConfig.java [65:83]
protected void configure(HttpSecurity http) throws Exception {
if (csrfEnabled) {
http = http.csrf().csrfTokenRepository(tokenRepository()).and();
} else {
http = http.csrf().disable();
}
http.exceptionHandling()
.authenticationEntryPoint(authenticationErrorHandler)
.accessDeniedHandler(accessDeniedHandler)
.and()
.sessionManagement()
.sessionCreationPolicy(SessionCreationPolicy.STATELESS)
.and()
.authorizeRequests()
.anyRequest()
.authenticated()
.and()
.apply(securityConfigurerAdapter);
}