Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Vite] Vite serves index.html directly when login view set in Spring Security configuration #12366

Closed
joheriks opened this issue Nov 16, 2021 · 1 comment · Fixed by #12382
Closed

Comments

@joheriks
Copy link
Contributor

joheriks commented Nov 16, 2021

Reproduction:

  • Check out https://github.com/vaadin/fusion-crm-tutorial
  • Update Vaadin version in pom.xml to 22.0-SNAPSHOT (2021-11-16 or newer, as 22.0.0.beta3 has an already fixed issue that prevents this bug from manifesting)
  • Run app and try to log in -> fails.
  • Notice that the bootstrap page source returned for /login is the plain index.html as returned by Vite, hence missing the CSRF token added by CsrfIndexHtmlRequestListener, and other things.

Flow should never serve index.html from Vite, as the bootstrap page must go through the IndexHtmlRequestHandler.

@joheriks joheriks added bug vite Tickets related to vite support labels Nov 16, 2021
@joheriks joheriks added this to To do in Frontend build optimization via automation Nov 16, 2021
@joheriks joheriks moved this from To do to In progress in Frontend build optimization Nov 16, 2021
@joheriks joheriks self-assigned this Nov 16, 2021
Frontend build optimization automation moved this from In progress to Done Nov 18, 2021
@vaadin-bot
Copy link
Collaborator

This ticket/PR has been released with platform 22.0.0.rc1 and is also targeting the upcoming stable 22.0.0 version.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment