
Closed
Posted
Paid on delivery
I’m building a Spring-based service router and need robust CSRF protection on all API endpoints. The idea is to leverage Public Key Infrastructure so that every incoming request carries a verifiable, signed token before it reaches any controller logic. Here’s the core of what I’m after: • A Spring Security configuration (Boot-compatible) that intercepts every request—GET, POST, anything—and checks a PKI-backed CSRF token. • A lightweight way for upstream services or clients to obtain and refresh that token; we can refine the flow together once you see my current architecture diagrams. • Server-side validation that ties the token to the session (or an equivalent stateless approach) so replay attacks are blocked. • Clean, readable code with unit tests and a brief README explaining setup, cert/key generation, and how to add new endpoints without breaking protection. I’ll hand over all existing router code plus the PKI assets I already manage; you focus on wiring Spring Security, integrating the certificate check, and making sure invalid or missing tokens trigger an immediate 403. If you’ve tackled CSRF with JWT, x509, or similar in Spring before, you’ll settle in quickly. Once this is in place I’ll run acceptance tests that fire mixed request types at the router and expect only properly signed calls to succeed. Looking forward to your ideas on the best crypto libraries or custom filters to keep the solution lean and future-proof.
Project ID: 40207309
9 proposals
Remote project
Active 1 mo ago
Set your budget and timeframe
Get paid for your work
Outline your proposal
It's free to sign up and bid on jobs
9 freelancers are bidding on average ₹900 INR for this job

"I have gone through your description. "This is my area of specialization, i can get it done 100 % perfectly well. Please ping me in person. I can help you to complete all tasks. I have hands-on experience in this field. We have already done similar types of projects. Connect with us for more details. Rest assured your satisfaction is guaranteed." Looking forward to your response." Thank you for your time and I am confident that we will be a great fit for this project. Best,
₹1,050 INR in 7 days
4.8
4.8

Hi, I can help you implement robust PKI-based CSRF protection across your Spring service router using clean, production-ready Spring Security configuration. I’ll handle: PKI-backed CSRF validation that intercepts all requests (GET/POST/etc.) before controller logic Secure token issuance and refresh flow for upstream services/clients Server-side validation tied to session or stateless design to prevent replay attacks Immediate 403 handling for missing or invalid tokens via custom security filters Clean, readable code with unit tests and a short README covering setup, cert/key usage, and extension I’m comfortable working with Spring Security, x509/JWT-based security, custom filters, and crypto libraries, and I’ll keep the solution lean and future-proof. Once wired in, your acceptance tests should pass with only properly signed requests succeeding. Happy to review your current router setup and architecture diagrams and get started right away. Thanks, Abhay Kumar
₹1,050 INR in 7 days
3.7
3.7

Dear client! I have a lot of experience working with SpringBoot's RESTful API for the backend with Spring Security. I have experience developing a backend for currency exchange operations for a large bank. Also worked as a backend for the purchase/sale of securities in the same bank. Java development environment, SpringBoot, SwaggerUI. Used PostgreeSQL, Redis, RabbitMQ... I will be glad to cooperate with you Best regards, Vladimir
₹1,050 INR in 7 days
0.0
0.0

Hi! I was excited reading this because I’ve built Spring Boot security layers using PKI, x509, JWT, and custom Spring Security filters for high-trust service-to-service systems. I’d approach this by adding a custom OncePerRequestFilter wired into Spring Security to enforce PKI-signed CSRF tokens on every request, using certificate-backed signatures + nonce/timestamp binding (or stateless HMAC/JWT hybrid if preferred) to prevent replay clean, testable, and Boot-friendly. I’ll deliver well-documented config, unit tests, and a clear README covering key generation and extension. Happy to jump on a quick call to review your architecture diagrams I’ll walk you through similar work I’ve done and share relevant examples live. Best Regards Ibran Shafee
₹1,050 INR in 7 days
0.0
0.0

⚠️ IF YOU'RE NOT HAPPY YOU DON’T PAY ⚠️ Looks like you need airtight CSRF protection that works seamlessly with your Spring router without slowing things down. Handling PKI-signed tokens, blocking replay attacks, and making sure every request fails fast with a clean 403 can get messy especially when balancing stateless validation and readable architecture. I have worked with Spring Security filters, JWT/x509 flows, and secure API gateways, so integrating certificate checks, building a lean token flow, and delivering tested, maintainable code is right in my lane. I also focus on clear structure so adding new endpoints won’t break protection later. I would love to chat about your project! The worst that can happen is you walk away with a free consultation. Muhammad Aqeel
₹600 INR in 1 day
0.0
0.0

Hi ? I can implement PKI-backed CSRF protection across all Spring Boot endpoints using Spring Security. I’ll add a custom security filter that intercepts every request (GET/POST/etc.) and validates a signed CSRF token using your existing certificates (x509 / public-key verification). Invalid or missing tokens will be rejected immediately with 403 before any controller logic runs. Approach Spring Security filter chain with a custom CSRF verification filter Token bound to session or stateless (JWT + signature + nonce) to prevent replay attacks Lightweight token issuance/refresh endpoint for upstream services Clean, readable config with unit tests (MockMvc + SecurityContext) Deliverables Boot-compatible Spring Security config PKI integration using standard crypto libs (Java Security / Bouncy Castle if needed) Tests + README covering setup, cert generation, and extension guidelines I’ve worked with Spring Security, JWT, x509 auth, and custom filters, so integrating this into your router will be smooth and future-proof.
₹1,000 INR in 7 days
0.0
0.0

Hello, I’ve reviewed your project details and understand your need for a reliable and well-performing mobile application. I have 3 years of hands-on experience in mobile app development, focusing on performance, stability, and smooth user experience. I work with Android Studio, Flutter, VS Code, Firebase, and Figma to handle both development and interface flow efficiently from start to finish. Please share your app requirements or feature details so I can proceed with a clear plan and deliver on time. Best regards, M. AbouBaker
₹600 INR in 4 days
0.0
0.0

Hello, I am a Java Full Stack Developer with 4+ years of experience in Spring Boot and secure API development. I can implement PKI-backed CSRF protection for all endpoints, validating signed tokens, preventing replay attacks, and triggering immediate 403 responses for invalid requests. I ensure maintainable, unit-tested code with clear documentation for setup, certificate management, and adding new endpoints. Regards Ahammad
₹900 INR in 7 days
0.0
0.0

Bengaluru, India
Member since Mar 17, 2021
₹600-1500 INR
₹600-1500 INR
₹100-400 INR / hour
₹600-1500 INR
₹600-1500 INR
₹250000-500000 INR
₹1500-12500 INR
₹600-800 INR
₹750-1250 INR / hour
$8-15 USD / hour
$250-750 USD
₹1250-2500 INR / hour
₹12500-37500 INR
₹1250-2500 INR / hour
$10-25 USD
₹600-1500 INR
₹600-1500 INR
$60-70 USD / hour
₹600-601 INR
$15-25 USD / hour
$8-15 USD / hour
₹1250-2500 INR / hour
$10-30 USD
$250-750 USD
₹750-1250 INR / hour