fix reported issues

georchestra · Mar 7, 2024 · 126302e · 126302e
1 parent 88e789a
commit 126302e
Showing 1 changed file with 4 additions and 1 deletion.
diff --git a/gateway/src/main/java/org/georchestra/gateway/security/GatewaySecurityConfiguration.java b/gateway/src/main/java/org/georchestra/gateway/security/GatewaySecurityConfiguration.java
@@ -83,7 +83,10 @@ SecurityWebFilterChain securityWebFilterChain(ServerHttpSecurity http,
 
         // disable CSRF protection, considering it will be managed
         // by proxified webapps, not the gateway.
-        http.csrf().disable().exceptionHandling().accessDeniedHandler(new CustomAccessDeniedHandler());
+        http.csrf().disable();
+
+        // custom handling for forbidden error
+        http.exceptionHandling().accessDeniedHandler(new CustomAccessDeniedHandler());
 
         sortedCustomizers(customizers).forEach(customizer -> {
             log.debug("Applying security customizer {}", customizer.getName());