some comments

Author: dsmf

src/main/java/de/doubleslash/example/springboot/MySecurityConfigurer.java

@@ -39,10 +39,13 @@ public static class BasicAuthAdminForDevFunctionality extends WebSecurityConfigu
       protected void configure(final HttpSecurity http) throws Exception {
          http.antMatcher("/h2-console/**").authorizeRequests().anyRequest().permitAll();
 
+         // CSRF Prüfung für H2 Konsole deaktivieren, ok, da wir diese nur während der Entwicklung brauchen...
+         // Ansonsten: There was an unexpected error (type=Forbidden, status=403).
+         // Expected CSRF token not found. Has your session expired?
          http.csrf().disable();
+         // ebenso Frame Options...
          http.headers().frameOptions().disable();
-         // There was an unexpected error (type=Forbidden, status=403).
-         // Expected CSRF token not found. Has your session expired?
+
       }
 
    }

src/main/java/de/doubleslash/example/springboot/UserInit.java

@@ -15,7 +15,8 @@ public class UserInit implements CommandLineRunner {
    public void run(final String... args) throws Exception {
       final User user1 = new User("user1",
             // Passwort hashen
-            new BCryptPasswordEncoder().encode("bootifulPassword"), true, new Role("USER"));
+            new BCryptPasswordEncoder().encode("bootifulPassword"), //
+            true, new Role("USER"));
       userRepo.save(user1);
    }