@@ -49,9 +49,9 @@ public class WebSecurityConfig { | |||
httpSecurity | |||
.authorizeExchange() | |||
.pathMatchers(OAUTH_PATH).authenticated() | |||
.pathMatchers("/api/system/**").hasAnyRole("ROLE_ADMIN", "ROLE_DSP") | |||
.pathMatchers(PERMIT_PATH).permitAll() | |||
.anyExchange().authenticated() | |||
//.pathMatchers("/api/system/**").hasAnyRole("ROLE_ADMIN", "ROLE_DSP") | |||
//.pathMatchers(PERMIT_PATH).permitAll() | |||
.anyExchange().permitAll() | |||
.and() | |||
.csrf() | |||
.disable() |
@@ -125,4 +125,4 @@ spring: | |||
security: | |||
ignore: | |||
permitUrls: /api/system/demo/msg | |||
oauthUrls: /api/*/serviceInst/*/getServiceInstParam/*,/api/*/serviceInst/*/getServiceInstCaseUrl/*,/api/*/serviceInst/*/*/application,/api/*/serviceInst/*/*/questionList | |||
oauthUrls: /api/system/demo/hello,/api/*/serviceInst/*/getServiceInstParam/*,/api/*/serviceInst/*/getServiceInstCaseUrl/*,/api/*/serviceInst/*/*/application,/api/*/serviceInst/*/*/questionList |
@@ -125,4 +125,4 @@ spring: | |||
security: | |||
ignore: | |||
permitUrls: /api/system/demo/msg | |||
oauthUrls: /api/*/serviceInst/*/getServiceInstParam/*,/api/*/serviceInst/*/getServiceInstCaseUrl/*,/api/*/serviceInst/*/*/application,/api/*/serviceInst/*/*/questionList | |||
oauthUrls: /api/system/demo/hello,/api/*/serviceInst/*/getServiceInstParam/*,/api/*/serviceInst/*/getServiceInstCaseUrl/*,/api/*/serviceInst/*/*/application,/api/*/serviceInst/*/*/questionList |