perf($Gateway): dynamic web security switch

johnnymillergh · Dec 23, 2020 · b5f4333 · b5f4333
1 parent e3176ad
commit b5f4333
Show file tree

Hide file tree

Showing 2 changed files with 11 additions and 0 deletions.
diff --git a/...ay/src/main/java/com/jmsoftware/maf/apigateway/security/WebFluxSecurityConfiguration.java b/...ay/src/main/java/com/jmsoftware/maf/apigateway/security/WebFluxSecurityConfiguration.java
@@ -39,6 +39,13 @@ public class WebFluxSecurityConfiguration {
 
     @Bean
     SecurityWebFilterChain springWebFilterChain(ServerHttpSecurity http) {
+        if (mafConfiguration.getWebSecurityDisabled()) {
+            log.warn("Web security was disabled.");
+            return http
+                    .cors().disable()
+                    .csrf().disable()
+                    .build();
+        }
         return http
                 .cors().disable()
                 .csrf().disable()

diff --git a/api-gateway/src/main/resources/application-development-local.yml b/api-gateway/src/main/resources/application-development-local.yml
@@ -20,3 +20,7 @@ spring:
         max-idle: 10
         max-wait: -1ms
         min-idle: 0
+
+maf:
+  configuration:
+    web-security-disabled: true