Skip to content

Enforce CSRF in integration fixture - #19

Merged
Sequela02 merged 1 commit into
mainfrom
codex/enable-csrf-integration-tests
Jul 13, 2026
Merged

Enforce CSRF in integration fixture#19
Sequela02 merged 1 commit into
mainfrom
codex/enable-csrf-integration-tests

Conversation

@Sequela02

Copy link
Copy Markdown
Contributor

Summary

  • replace the integration fixture's global CSRF disable with stateless CookieCsrfTokenRepository
  • obtain a real token for the login POST through a test-only endpoint
  • prove missing and invalid tokens are rejected and no JSESSIONID is created

Verification

  • ./gradlew.bat clean check qualityCheck build --no-daemon

Closes CodeQL alert #1 without dismissal or suppression.

@Sequela02
Sequela02 merged commit 4f3fa90 into main Jul 13, 2026
3 checks passed
@Sequela02
Sequela02 deleted the codex/enable-csrf-integration-tests branch July 13, 2026 00:31
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant