Marcel 54d32c9163 test(security): add CSRF rejection test to DocumentControllerTest ...

Adds regression coverage for the custom accessDeniedHandler in
SecurityConfig: a POST without X-XSRF-TOKEN returns 403 with error
code CSRF_TOKEN_MISSING, not a generic Spring 403.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

2026-05-19 09:23:01 +02:00

..

main

fix(auth): sequential rate-limit check with ipEmail token refund on IP failure

2026-05-19 09:23:01 +02:00

test

test(security): add CSRF rejection test to DocumentControllerTest

2026-05-19 09:23:01 +02:00