|
@@ -29,8 +29,10 @@ public class SecurityConfig {
|
|
|
@Bean
|
|
@Bean
|
|
|
public SecurityFilterChain securityFilterChain(HttpSecurity http) throws Exception {
|
|
public SecurityFilterChain securityFilterChain(HttpSecurity http) throws Exception {
|
|
|
http.csrf().disable()
|
|
http.csrf().disable()
|
|
|
- .authorizeHttpRequests(request -> request.requestMatchers("/api/**")
|
|
|
|
|
- .permitAll().anyRequest().authenticated())
|
|
|
|
|
|
|
+ .authorizeHttpRequests(requests -> requests
|
|
|
|
|
+ .requestMatchers("/actuator/health", "/actuator/info", "/actuator/prometheus", "/api/**").permitAll()
|
|
|
|
|
+ .anyRequest().authenticated()
|
|
|
|
|
+ )
|
|
|
.sessionManagement(manager -> manager.sessionCreationPolicy(STATELESS))
|
|
.sessionManagement(manager -> manager.sessionCreationPolicy(STATELESS))
|
|
|
.authenticationProvider(authenticationProvider())
|
|
.authenticationProvider(authenticationProvider())
|
|
|
.addFilterBefore(jwtAuthenticationFilter, UsernamePasswordAuthenticationFilter.class);
|
|
.addFilterBefore(jwtAuthenticationFilter, UsernamePasswordAuthenticationFilter.class);
|