oasp#689 fixing h2 console

jdiazgon · Oct 4, 2018 · e634164 · e634164
1 parent d6bb427
commit e634164
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/.../main/java/__packageInPathFormat__/general/service/impl/config/BaseWebSecurityConfig.java b/.../main/java/__packageInPathFormat__/general/service/impl/config/BaseWebSecurityConfig.java
@@ -88,6 +88,10 @@ public void configure(HttpSecurity http) throws Exception {
         // register login and logout filter that handles rest logins
         .addFilterAfter(getSimpleRestAuthenticationFilter(), BasicAuthenticationFilter.class)
         .addFilterAfter(getSimpleRestLogoutFilter(), LogoutFilter.class);
+
+	// uncomment these lines to enable h2 console
+	// http.csrf().disable();
+	// http.headers().frameOptions().disable();	
 
     if (this.corsEnabled) {
       http.addFilterBefore(getCorsFilter(), CsrfFilter.class);