Optional ACAHs: X-XSRF-TOKEN

[fennekit]

What's this PR do/fix?

#2578. Allow to exclude urls from the CSRF header

Are there unit tests? If not how should this be manually tested?

yes. For checking the configuration. No

Any background context you want to provide?

Like #2578 I ran into issues using KeyCloak with SpringFox. It is now possible to enable/disable CSRF support and/or filter out the header for certain domains.

What are the relevant issues?

CSRF headers are send for all requests.

[codecov]

Codecov Report

Merging #2706 into master will decrease coverage by 0.05%.
The diff coverage is 68.75%.

@@             Coverage Diff              @@
##             master    #2706      +/-   ##
============================================
- Coverage     94.77%   94.72%   -0.06%     
- Complexity     3161     3163       +2     
============================================
  Files           354      354              
  Lines          8057     8071      +14     
  Branches        608      608              
============================================
+ Hits           7636     7645       +9     
- Misses          271      276       +5     
  Partials        150      150

Impacted Files	Coverage Δ	Complexity Δ
...umentation/swagger/web/UiConfigurationBuilder.java	92% <42.85%> (-8%)	16 <0> (ø)
...fox/documentation/swagger/web/UiConfiguration.java	90.66% <88.88%> (-0.38%)	24 <3> (+2)

[dilipkrish]

Thanks for your PR! I'll review and pull in this PR shortly.