Marcel e89dd5dc3c docs: document why CSRF is intentionally disabled in SecurityConfig ...

The previous comment implied CSRF was disabled as a temporary dev
convenience. Replaced it with an explanation of why it is safe with
the current Authorization-header-based auth scheme, and added a
clear note on when it must be re-enabled.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

2026-03-15 12:27:50 +01:00

..

api_tests

restructure: flatten workspace nesting, move devcontainer to root

2026-03-15 11:47:58 +01:00

src

docs: document why CSRF is intentionally disabled in SecurityConfig

2026-03-15 12:27:50 +01:00

.gitignore

restructure: flatten workspace nesting, move devcontainer to root

2026-03-15 11:47:58 +01:00

Dockerfile

restructure: flatten workspace nesting, move devcontainer to root

2026-03-15 11:47:58 +01:00

HELP.md

restructure: flatten workspace nesting, move devcontainer to root

2026-03-15 11:47:58 +01:00

mvnw

restructure: flatten workspace nesting, move devcontainer to root

2026-03-15 11:47:58 +01:00

mvnw.cmd

restructure: flatten workspace nesting, move devcontainer to root

2026-03-15 11:47:58 +01:00

pom.xml

refactor: migrate to YAML config and add Maven dev/prod profiles

2026-03-15 12:21:16 +01:00