Ionic App can't login to the backend jHipster OAuth 2.0/Keycloak about generator-jhipster-ionic HOT 10 CLOSED

On May 28, 2018, at 15:57, Marlon Falzetta ***@***.***> wrote: Hi, I create a jHipster web monolithic/OAuth 2.0/OIDC Keycloak application with jHipster 4.14.4 version, see attachment. And the application works fine. After i create a jHipster Ionic app basead on my web monolithic backend. And i cant login from ionic app. Backend dont have ResourceServerConfiguration class, and the class SecurityConfiguration have a method below: @OverRide protected void configure(HttpSecurity http) throws Exception { http .csrf() .csrfTokenRepository(CookieCsrfTokenRepository.withHttpOnlyFalse()) .and() .addFilterBefore(corsFilter, CsrfFilter.class) .exceptionHandling() .authenticationEntryPoint(problemSupport) .accessDeniedHandler(problemSupport) .and() .logout() .logoutUrl("/api/logout") .logoutSuccessHandler(ajaxLogoutSuccessHandler()) .permitAll() .and() .headers() .frameOptions() .disable() .and() .authorizeRequests() .antMatchers("/api/profile-info").permitAll() .antMatchers("/api/**").authenticated() .antMatchers("/management/health").permitAll() .antMatchers("/management/**").hasAuthority(AuthoritiesConstants.ADMIN) .antMatchers("/v2/api-docs/**").permitAll() .antMatchers("/swagger-resources/configuration/ui").permitAll() .antMatchers("/swagger-ui/index.html").hasAuthority(AuthoritiesConstants.ADMIN); } My Ionic app try access (in login) the endpoint: POST http://localhost:8080/api/authenticate The result in chrome for Ionic is: 403 (Forbidden) The log in application is: 2018-05-28 18:56:35.000 DEBUG 14454 --- [ XNIO-16 task-2] o.s.b.w.f.OrderedRequestContextFilter : Bound request context to thread: HttpServletRequestImpl [ POST /api/authenticate ] 2018-05-28 18:56:35.001 WARN 14454 --- [ XNIO-16 task-2] o.z.p.spring.web.advice.AdviceTrait : Forbidden: Invalid CSRF Token 'null' was found on the request parameter '_csrf' or header 'X-XSRF-TOKEN'. 2018-05-28 18:56:35.004 WARN 14454 --- [ XNIO-16 task-2] .m.m.a.ExceptionHandlerExceptionResolver : Resolved exception caused by Handler execution: org.springframework.security.web.csrf.InvalidCsrfTokenException: Invalid CSRF Token 'null' was found on the request parameter '_csrf' or header 'X-XSRF-TOKEN'. 2018-05-28 18:56:35.004 DEBUG 14454 --- [ XNIO-16 task-2] o.s.b.w.f.OrderedRequestContextFilter : Cleared thread-bound request context: HttpServletRequestImpl [ POST /api/authenticate ] — You are receiving this because you are subscribed to this thread. Reply to this email directly, view it on GitHub, or mute the thread.