From b070de5f60d8d72098585e33bb1aee294be7ec0c Mon Sep 17 00:00:00 2001
From: Joep de Jong <joep@joepdejong.com>
Date: Sat, 4 May 2024 19:49:12 +0200
Subject: [PATCH] Enable csrf

---
 src/main/java/ch/wisv/events/ChConnectConfiguration.java | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/src/main/java/ch/wisv/events/ChConnectConfiguration.java b/src/main/java/ch/wisv/events/ChConnectConfiguration.java
index 08d750a7..eb146c0f 100644
--- a/src/main/java/ch/wisv/events/ChConnectConfiguration.java
+++ b/src/main/java/ch/wisv/events/ChConnectConfiguration.java
@@ -68,8 +68,7 @@ public void configure(HttpSecurity http) throws Exception {
         http
                 .cors()
                 .and()
-                .csrf().disable()
-                .authorizeRequests()
+                .csrf()
                 .and().authorizeRequests()
                     .antMatchers("/administrator/**").hasRole("ADMIN")
                     .antMatchers("/", "/management/health").permitAll()