Skip to content
Snippets Groups Projects
Verified Commit ff775ed0 authored by Adam Krídl's avatar Adam Krídl
Browse files

Permit access to actuators' endpoints to all

parent 60c70d58
No related branches found
No related tags found
No related merge requests found
...@@ -23,6 +23,9 @@ public class AppConfig { ...@@ -23,6 +23,9 @@ public class AppConfig {
.requestMatchers(HttpMethod.GET, "/").permitAll() .requestMatchers(HttpMethod.GET, "/").permitAll()
.requestMatchers(HttpMethod.GET, "/swagger-ui.html").permitAll() .requestMatchers(HttpMethod.GET, "/swagger-ui.html").permitAll()
// actuator
.requestMatchers("/actuator/**").permitAll()
// Manager can read everything // Manager can read everything
.requestMatchers(HttpMethod.GET, "/api/**").hasAuthority(Authorities.MANAGER) .requestMatchers(HttpMethod.GET, "/api/**").hasAuthority(Authorities.MANAGER)
......
...@@ -22,6 +22,10 @@ public class AppConfig { ...@@ -22,6 +22,10 @@ public class AppConfig {
.requestMatchers("/v3/api-docs/**").permitAll() .requestMatchers("/v3/api-docs/**").permitAll()
.requestMatchers(HttpMethod.GET, "/").permitAll() .requestMatchers(HttpMethod.GET, "/").permitAll()
.requestMatchers(HttpMethod.GET, "/swagger-ui.html").permitAll() .requestMatchers(HttpMethod.GET, "/swagger-ui.html").permitAll()
// actuator
.requestMatchers("/actuator/**").permitAll()
// Manager has access to all reports // Manager has access to all reports
.anyRequest().hasAuthority(Authorities.MANAGER) .anyRequest().hasAuthority(Authorities.MANAGER)
) )
......
...@@ -23,6 +23,9 @@ public class AppConfig { ...@@ -23,6 +23,9 @@ public class AppConfig {
.requestMatchers(HttpMethod.GET, "/").permitAll() .requestMatchers(HttpMethod.GET, "/").permitAll()
.requestMatchers(HttpMethod.GET, "/swagger-ui.html").permitAll() .requestMatchers(HttpMethod.GET, "/swagger-ui.html").permitAll()
// actuator
.requestMatchers("/actuator/**").permitAll()
// used under the authority of the user using the original api // used under the authority of the user using the original api
.requestMatchers("/api/users/action").authenticated() .requestMatchers("/api/users/action").authenticated()
......
...@@ -22,6 +22,10 @@ public class AppConfig { ...@@ -22,6 +22,10 @@ public class AppConfig {
.requestMatchers("/v3/api-docs/**").permitAll() .requestMatchers("/v3/api-docs/**").permitAll()
.requestMatchers(HttpMethod.GET, "/").permitAll() .requestMatchers(HttpMethod.GET, "/").permitAll()
.requestMatchers(HttpMethod.GET, "/swagger-ui.html").permitAll() .requestMatchers(HttpMethod.GET, "/swagger-ui.html").permitAll()
// actuator
.requestMatchers(HttpMethod.GET, "/actuator/**").permitAll()
// MANAGER has access to everything in this service // MANAGER has access to everything in this service
.anyRequest().hasAuthority(Authorities.MANAGER) .anyRequest().hasAuthority(Authorities.MANAGER)
) )
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment