How do I add Cache-Control with no-cache and no-store header in Spring Boot?

Question

I have Spring Boot 3.0.4 application and I have tried many things to add Cache-Control with no-store but either nothing happens or it says that headers or something is both enabled and disabled and gives me error. I have tried the following method but it doesn't show me Cache-Control headers in the response.

import java.util.List;

@Configuration
@EnableWebSecurity
public class ResourceServerConfig {

    private final List<String> protectedPaths = List.of(
            "/users/*/**",
            "/api/**",
            "/admin/**",
    );

    @Bean
    SecurityFilterChain securityFilterChain(HttpSecurity http) throws Exception {
        http
                .headers(headers -> headers.defaultsDisabled().disable()) // <-- I have added this line without help
                .csrf().disable()
                .securityMatcher(protectedPaths.toArray(new String[0]))
                .authorizeHttpRequests(requests -> requests.anyRequest().authenticated())
                .oauth2ResourceServer()
                .jwt(customizer -> customizer.jwtAuthenticationConverter(new UserAuthenticationTokenConverter()));
        return http.build();
    }

}

What I am doing wrong?

Hi dear @ilhan please add the exact error (ideally stack trace) to your question — Tamas Csizmadia
– Tamas Csizmadia, Commented Feb 2, 2024 at 13:27
gotcha! So you mentioned "it says that headers or something is both enabled and disabled and gives me error" -- I just wanted to know more about your error. Any detail can be helpful — Tamas Csizmadia
– Tamas Csizmadia, Commented Feb 2, 2024 at 13:33
Maybe this thread is helpful stackoverflow.com/questions/24164014/… — Easterwood
– Easterwood, Commented Feb 2, 2024 at 13:57

ilhan · Accepted Answer · 2024-02-05 12:32:20Z

import jakarta.servlet.*;
import jakarta.servlet.http.HttpServletResponse;
import org.springframework.core.Ordered;
import org.springframework.core.annotation.Order;
import org.springframework.stereotype.Component;
import org.springframework.web.util.ContentCachingResponseWrapper;

import java.io.IOException;

@Component
@Order(Ordered.HIGHEST_PRECEDENCE)
public class LogRequestHandler implements Filter {

    @Override
    public void doFilter(ServletRequest servletRequest, ServletResponse servletResponse, FilterChain filterChain) throws IOException, ServletException {
        ContentCachingResponseWrapper responseCacheWrapperObject = new ContentCachingResponseWrapper((HttpServletResponse) servletResponse);
        filterChain.doFilter(servletRequest, responseCacheWrapperObject);
        responseCacheWrapperObject.addHeader("Cache-Control", "no-cache, no-store, max-age=0, must-revalidate");
        responseCacheWrapperObject.copyBodyToResponse();
    }
}

Collectives™ on Stack Overflow

How do I add Cache-Control with no-cache and no-store header in Spring Boot?

1 Answer 1

Comments

Your Answer

Linked

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

Comments

Your Answer

Sign up or log in

Post as a guest

Linked

Related