Disable HTTP OPTIONS method in spring boot application

by

Previous answer is for tomcat only, so adding mine as well. You can disable the method cross-container by, for example, using a standard servlet filter:

import java.io.IOException;
import javax.servlet.FilterChain;
import javax.servlet.ServletException;
import javax.servlet.ServletResponse;
import javax.servlet.http.HttpServletRequest; 
import javax.servlet.http.HttpServletResponse; 

import org.springframework.stereotype.Component;     
import org.springframework.web.filter.OncePerRequestFilter; 

@Component
public class MethodFilter extends OncePerRequestFilter { 

    @Override 
    protected void doFilterInternal(HttpServletRequest request, HttpServletResponse response, FilterChain filterChain) 
                    throws ServletException, IOException { 
        if (request.getMethod().equals("OPTIONS")) {
            response.sendError(HttpServletResponse.SC_METHOD_NOT_ALLOWED);
        } else { 
            filterChain.doFilter(request, response); 
        } 
    }
}

Note: it is assumed that this class is componentscanned by Spring. If not, you can use other registration methods as detailed in here.

More Related Contents:

  1. Filter invoke twice when register as Spring bean
  2. Spring security CORS Filter
  3. Spring Security Configuration – HttpSecurity vs WebSecurity
  4. Spring Boot 2.0.x disable security for certain profile
  5. How to disable ‘X-Frame-Options’ response header in Spring Security?
  6. How to enable HTTP response caching in Spring Boot
  7. 401 instead of 403 with Spring Boot 2
  8. HttpSecurity, WebSecurity and AuthenticationManagerBuilder
  9. Multiple WebSecurityConfigurerAdapter in spring boot for multiple patterns
  10. Spring Security 5 : There is no PasswordEncoder mapped for the id “null”
  11. Securing Spring Boot API with API key and secret
  12. Spring Security HTTP Basic for RESTFul and FormLogin (Cookies) for web – Annotations
  13. How do I disable resolving login parameters passed as url parameters / from the url
  14. How do I add method based security to a Spring Boot project?
  15. What does Cookie CsrfTokenRepository.withHttpOnlyFalse () do and when to use it?
  16. Single role multiple IP addresses in Spring Security configuration
  17. disabling spring security in spring boot app [duplicate]
  18. Disabling a filter for only a few paths
  19. Spring Boot Microservices – Spring Security – ServiceTest and ControllerTest for JUnit throwing java.lang.StackOverflowError
  20. Spring Boot and multiple external configuration files
  21. Spring Boot – Cannot determine embedded database driver class for database type NONE
  22. Java Spring Boot: How to map my app root (“/”) to index.html?
  23. Can Spring Security use @PreAuthorize on Spring controllers methods?
  24. Filter order in spring-boot
  25. No serializer found for class org.hibernate.proxy.pojo.bytebuddy.ByteBuddyInterceptor
  26. Spring Boot: Unable to start EmbeddedWebApplicationContext due to missing EmbeddedServletContainerFactory bean
  27. java.lang.IllegalArgumentException: No converter found for return value of type
  28. Jackson – deserialize inner list of objects to list of one higher level
  29. PartialResultException when authenticating with Spring Security and JavaConfig
  30. Can I define System Properties within Spring Boot configuration files?

Leave a Comment