diff options
| author | Kamal Wickramanayake <kamal@inbox.lk> | 2026-07-03 22:05:24 +0530 |
|---|---|---|
| committer | Kamal Wickramanayake <kamal@inbox.lk> | 2026-07-03 22:05:24 +0530 |
| commit | ffe7db80b440a659da3bf6f9c09987ace861bba9 (patch) | |
| tree | f3b73d7a25395f80563c624dbde63ece3133f20d /microservices/03-resource-server/src/main/java/com/example/resourceserver/config | |
| parent | f0797705b02fe6df6cd2807fdea491cd07dcde8c (diff) | |
Prevent roles of all users being accessed via API gateway /bff/api/ path
Diffstat (limited to 'microservices/03-resource-server/src/main/java/com/example/resourceserver/config')
| -rw-r--r-- | microservices/03-resource-server/src/main/java/com/example/resourceserver/config/SecurityConfig.java | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/microservices/03-resource-server/src/main/java/com/example/resourceserver/config/SecurityConfig.java b/microservices/03-resource-server/src/main/java/com/example/resourceserver/config/SecurityConfig.java index 7102e69..bf9dbe5 100644 --- a/microservices/03-resource-server/src/main/java/com/example/resourceserver/config/SecurityConfig.java +++ b/microservices/03-resource-server/src/main/java/com/example/resourceserver/config/SecurityConfig.java @@ -18,7 +18,7 @@ public class SecurityConfig { http .authorizeHttpRequests(authorize -> authorize // 1. Specify the URL to allow without restrictions - .requestMatchers("/api/security/users/*/roles", "/public/**").permitAll() + .requestMatchers("/security/open/users/*/roles", "/public/**").permitAll() // 2. Require authentication for all other requests .anyRequest().authenticated() ) |