diff --git a/src/main/java/de/caritas/cob/mailservice/config/SecurityConfig.java b/src/main/java/de/caritas/cob/mailservice/config/SecurityConfig.java
index b386e41..4fd787b 100644
--- a/src/main/java/de/caritas/cob/mailservice/config/SecurityConfig.java
+++ b/src/main/java/de/caritas/cob/mailservice/config/SecurityConfig.java
@@ -42,7 +42,8 @@ public class SecurityConfig {
   public SecurityFilterChain configure(HttpSecurity http) throws Exception {
 
     var httpSecurity =
-        http
+        http.csrf()
+            .disable()
             .addFilterBefore(
                 new StatelessCsrfFilter(csrfCookieProperty, csrfHeaderProperty), CsrfFilter.class);