add csrf code

Author: nahsra

pom.xml

@@ -47,6 +47,23 @@
       <groupId>jakarta.ws.rs</groupId>
       <artifactId>jakarta.ws.rs-api</artifactId>
     </dependency>
+
+    <dependency>
+      <groupId>org.springframework</groupId>
+      <artifactId>spring-webmvc</artifactId>
+      <version>5.3.9</version>
+    </dependency>
+    <dependency>
+      <groupId>org.springframework.security</groupId>
+      <artifactId>spring-security-config</artifactId>
+      <version>5.8.0</version> <!-- Use the latest stable version -->
+    </dependency>
+    <dependency>
+      <groupId>org.springframework.security</groupId>
+      <artifactId>spring-security-web</artifactId>
+      <version>5.8.0</version>
+    </dependency>
+
     <dependency>
       <groupId>io.github.pixee</groupId>
       <artifactId>java-security-toolkit</artifactId>

src/main/java/com/acme/csrf/ContactController.java

@@ -0,0 +1,27 @@
+package com.acme.csrf;
+
+import org.springframework.web.bind.annotation.RequestMapping;
+import org.springframework.web.bind.annotation.ResponseBody;
+
+import java.util.Optional;
+
+/** The contact controller. */
+public abstract class ContactController {
+
+    @RequestMapping("/search")
+    public @ResponseBody
+    void logout() {
+        if (currentSession().isPresent()) {
+            Session session = currentSession().get();
+            session.logout();
+        }
+    }
+
+    abstract Optional<Session> currentSession();
+
+    /** The session interface. */
+    interface Session {
+        /** Logs out the session. */
+        void logout();
+    }
+}

src/main/java/com/acme/csrf/SecurityConfiguration.java

@@ -0,0 +1,16 @@
+package com.acme.csrf;
+
+import org.springframework.context.annotation.Bean;
+import org.springframework.context.annotation.Configuration;
+import org.springframework.security.config.annotation.web.builders.HttpSecurity;
+import org.springframework.security.web.SecurityFilterChain;
+
+@Configuration
+public class SecurityConfiguration {
+
+    @Bean
+    public SecurityFilterChain filterChain(HttpSecurity http) throws Exception {
+        http.csrf().disable();
+        return http.build();
+    }
+}