Skip to content

Commit 68d9191

Browse files
committed
Polish Dark Mode for CSRF and Method Security diagrams
Closes gh-16151
1 parent 1d916c3 commit 68d9191

File tree

2 files changed

+3
-0
lines changed

2 files changed

+3
-0
lines changed

docs/modules/ROOT/pages/servlet/authorization/method-security.adoc

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -114,6 +114,7 @@ open class MyCustomerService {
114114

115115
A given invocation to `MyCustomerService#readCustomer` may look something like this when Method Security <<activate-method-security,is activated>>:
116116

117+
[.invert-dark]
117118
image::{figures}/methodsecurity.png[]
118119

119120
1. Spring AOP invokes its proxy method for `readCustomer`. Among the proxy's other advisors, it invokes an {security-api-url}org/springframework/security/authorization/method/AuthorizationManagerBeforeMethodInterceptor.html[`AuthorizationManagerBeforeMethodInterceptor`] that matches <<annotation-method-pointcuts,the `@PreAuthorize` pointcut>>

docs/modules/ROOT/pages/servlet/exploits/csrf.adoc

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -82,6 +82,7 @@ To learn more about CSRF protection for your application, consider the following
8282
CSRF protection is provided by several components that are composed within the {security-api-url}org/springframework/security/web/csrf/CsrfFilter.html[`CsrfFilter`]:
8383

8484
.`CsrfFilter` Components
85+
[.invert-dark]
8586
image::{figures}/csrf.png[]
8687

8788
CSRF protection is divided into two parts:
@@ -90,6 +91,7 @@ CSRF protection is divided into two parts:
9091
2. Determine if the request requires CSRF protection, load and validate the token, and <<csrf-access-denied-handler,handle `AccessDeniedException`>>.
9192

9293
.`CsrfFilter` Processing
94+
[.invert-dark]
9395
image::{figures}/csrf-processing.png[]
9496

9597
* image:{icondir}/number_1.png[] First, the {security-api-url}org/springframework/security/web/csrf/DeferredCsrfToken.html[`DeferredCsrfToken`] is loaded, which holds a reference to the <<csrf-token-repository,`CsrfTokenRepository`>> so that the persisted `CsrfToken` can be loaded later (in image:{icondir}/number_4.png[]).

0 commit comments

Comments
 (0)