From eeecdd8e6063298bb6414b9f6a8b0bc4cee2eba4 Mon Sep 17 00:00:00 2001
From: Alexander Marsalek <amarsalek@iaik.tugraz.at>
Date: Fri, 12 Feb 2021 14:31:04 +0100
Subject: tests working, added IdAustriaClientAuthSignalController

---
 eidas_modules/authmodule-eIDAS-v2/checks/spotbugs-exclude.xml | 6 ++++++
 1 file changed, 6 insertions(+)

(limited to 'eidas_modules/authmodule-eIDAS-v2/checks')

diff --git a/eidas_modules/authmodule-eIDAS-v2/checks/spotbugs-exclude.xml b/eidas_modules/authmodule-eIDAS-v2/checks/spotbugs-exclude.xml
index 375f73f4..7d7467aa 100644
--- a/eidas_modules/authmodule-eIDAS-v2/checks/spotbugs-exclude.xml
+++ b/eidas_modules/authmodule-eIDAS-v2/checks/spotbugs-exclude.xml
@@ -10,6 +10,12 @@
       <Method name="getPendingRequestId" />
       <Bug pattern="CRLF_INJECTION_LOGS" />               
     </Match>
+    <Match>
+      <!-- CSFR protection is implemented by pendingRequestId that is an one-time token -->
+      <Class name="at.asitplus.eidas.specific.modules.auth.eidas.v2.idaustriaclient.IdAustriaClientAuthSignalController" />
+      <Method name="performAuthentication" />
+      <Bug pattern="SPRING_CSRF_UNRESTRICTED_REQUEST_MAPPING" />               
+    </Match>
     <Match>
       <!-- CSFR protection is implemented by pendingRequestId that is an one-time token -->
       <Class name="at.asitplus.eidas.specific.modules.auth.eidas.v2.EidasSignalServlet" />
-- 
cgit v1.2.3