Class WebHeaderConfig

java.lang.Object

ch.admin.bit.jeap.oauth.mock.server.config.WebHeaderConfig

@Configuration
public class WebHeaderConfig
extends Object

Constructor Summary

Constructors

Constructor	Description
WebHeaderConfig()

Method Summary

Modifier and Type	Method	Description
ch.admin.bit.jeap.web.configuration.HttpHeaderFilterPostProcessor	noCacheHttpHeaderFilterPostProcessor()	The web-config-starter's AddHeadersFilter applies a long-lived Cache-Control: public, max-age=604800 to dynamic endpoints (e.g.

Methods inherited from class Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Details

WebHeaderConfig

public WebHeaderConfig()

Method Details

noCacheHttpHeaderFilterPostProcessor

@Bean
public ch.admin.bit.jeap.web.configuration.HttpHeaderFilterPostProcessor noCacheHttpHeaderFilterPostProcessor()

The web-config-starter's AddHeadersFilter applies a long-lived Cache-Control: public, max-age=604800 to dynamic endpoints (e.g. /openIdMockServerLogin), causing the login/logout forms and their error responses to be cached by the browser. Removing its Cache-Control/Expires headers here lets Spring Security emit no-store instead, disabling caching while keeping all the starter's security headers.