diff --git a/connector-service/src/main/java/de/thm/arsnova/connector/config/SecurityConfig.java b/connector-service/src/main/java/de/thm/arsnova/connector/config/SecurityConfig.java index 409b5358360833816192402da0b6cbd719319da7..df5af0070ba01265fe8adcc830e5d446732b51fd 100644 --- a/connector-service/src/main/java/de/thm/arsnova/connector/config/SecurityConfig.java +++ b/connector-service/src/main/java/de/thm/arsnova/connector/config/SecurityConfig.java @@ -14,6 +14,7 @@ import org.springframework.security.config.annotation.method.configuration.Enabl import org.springframework.security.config.annotation.web.builders.HttpSecurity; import org.springframework.security.config.annotation.web.configuration.WebSecurityConfigurerAdapter; import org.springframework.security.config.annotation.web.servlet.configuration.EnableWebMvcSecurity; +import org.springframework.security.config.http.SessionCreationPolicy; import org.springframework.security.ldap.DefaultSpringSecurityContextSource; import org.springframework.security.web.authentication.UsernamePasswordAuthenticationFilter; @@ -100,7 +101,9 @@ public class SecurityConfig extends WebSecurityConfigurerAdapter { .exceptionHandling().defaultAuthenticationEntryPointFor( authHandler().tokenAuthenticationEntryPoint(), - authHandler().ajaxRequestMatcher()); + authHandler().ajaxRequestMatcher()).and() + + .sessionManagement().sessionCreationPolicy(SessionCreationPolicy.STATELESS); } else { http.httpBasic(); }