Fixed log level env variables for portal-backend.

docker/config/application.tmpl

@@ -71,4 +71,5 @@ keycloak:
     resource: {{ .Env.CLIENT_ID }}
     credentials:
         secret: {{ .Env.CLIENT_SECRET }}
+    principal-attribute: "preferred_username"
    # logoutUrl: {{ .Env.LOGOUT_URL }}
\ No newline at end of file

src/main/java/eu/hbp/mip/configuration/SecurityConfiguration.java

@@ -122,8 +122,9 @@ public class SecurityConfiguration extends KeycloakWebSecurityConfigurerAdapter
                     .accessDeniedHandler(new CustomAccessDeniedHandler())
                     // TODO .and().logout().addLogoutHandler(authLogoutHandler()).logoutSuccessUrl(redirectAfterLogoutUrl)
                     .and().logout().permitAll()
-                    .and().csrf().ignoringAntMatchers("/logout").csrfTokenRepository(csrfTokenRepository())
-                    .and().addFilterAfter(csrfHeaderFilter(), CsrfFilter.class)
+                    .and().csrf().disable() // TODO Remove
+            //.and().csrf().ignoringAntMatchers("/logout").csrfTokenRepository(csrfTokenRepository())
+                    //.and().addFilterAfter(csrfHeaderFilter(), CsrfFilter.class)
             ; // TODO ?? .addFilterBefore(ssoFilter(), BasicAuthenticationFilter.class);
         } else {
             http.antMatcher("/**")