Updated properties and enhanced SecurityConfig

- Changed `server.forward-headers-strategy` to `native` in `application.properties`.
- Added exclusion for `/login/oauth2/code/**` in CSRF configuration.

src/main/java/de/avatic/lcc/config/SecurityConfig.java

@@ -73,6 +73,7 @@ public class SecurityConfig {
                                 .jwtAuthenticationConverter(jwtAuthenticationConverter())
                         )
                 )
+
                 .exceptionHandling(ex -> ex
                         .defaultAuthenticationEntryPointFor(
                                 new HttpStatusEntryPoint(HttpStatus.UNAUTHORIZED),
@@ -82,6 +83,7 @@ public class SecurityConfig {
                 .csrf(csrf -> csrf
                         .csrfTokenRepository(CookieCsrfTokenRepository.withHttpOnlyFalse())
                         .csrfTokenRequestHandler(new LccCsrfTokenRequestHandler())
+                        .ignoringRequestMatchers("/login/oauth2/code/**")
                 )
                 .addFilterAfter(new CsrfCookieFilter(), BasicAuthenticationFilter.class)
                 .addFilterBefore(

src/main/resources/application.properties

@@ -23,4 +23,4 @@ spring.flyway.enabled=true
 spring.flyway.locations=classpath:db/migration
 spring.flyway.baseline-on-migrate=true
 spring.sql.init.mode=never
-server.forward-headers-strategy=framework
+server.forward-headers-strategy=native