tree e44685e9d0ff89e04455e9466bbf732cca26debd
parent 1379674240f390ba5f6e345d65bf5b2a591cd4ad
author exceptionfactory <exceptionfactory@apache.org> 1632808847 -0500
committer Nathan Gough <thenatog@gmail.com> 1633048575 -0400

NIFI-9241 Refactored CSRF mitigation using random Request-Token

- Replaced use of Authorization header with custom Request-Token header for CSRF mitigation
- Added Request-Token cookie for CSRF mitigation
- Replaced session storage of JWT with expiration in seconds
- Removed and disabled CORS configuration
- Disabled HTTP OPTIONS method
- Refactored HTTP Proxy URI construction using RequestUriBuilder

Signed-off-by: Nathan Gough <thenatog@gmail.com>

This closes #5417.