diff --git a/web/src/main/java/org/springframework/security/web/server/csrf/CookieServerCsrfTokenRepository.java b/web/src/main/java/org/springframework/security/web/server/csrf/CookieServerCsrfTokenRepository.java index 9ccedc8666b..8357904c064 100644 --- a/web/src/main/java/org/springframework/security/web/server/csrf/CookieServerCsrfTokenRepository.java +++ b/web/src/main/java/org/springframework/security/web/server/csrf/CookieServerCsrfTokenRepository.java @@ -76,7 +76,7 @@ public Mono saveToken(ServerWebExchange exchange, CsrfToken token) { .httpOnly(this.cookieHttpOnly) .maxAge(tokenValue.map(val -> -1).orElse(0)) .path(Optional.ofNullable(this.cookiePath).orElseGet(() -> getRequestContext(exchange.getRequest()))) - .secure(Optional.ofNullable(exchange.getRequest().getSslInfo()).map(sslInfo -> true).orElse(false)) + .secure(Optional.ofNullable(exchange.getRequest().getSslInfo()).isPresent()) .build(); exchange.getResponse().addCookie(cookie);