Skip to content

Commit

Permalink
permit /token on the auth step after the SecureTokenFilter
Browse files Browse the repository at this point in the history
  • Loading branch information
m-gora authored and borisrizov-zf committed Jan 19, 2024
1 parent 3e7c9d0 commit 9520502
Showing 1 changed file with 1 addition and 0 deletions.
Original file line number Diff line number Diff line change
Expand Up @@ -78,6 +78,7 @@ public SecurityFilterChain filterChain(HttpSecurity http) throws Exception {
.requestMatchers(new AntPathRequestMatcher("/docs/api-docs/**")).permitAll()
.requestMatchers(new AntPathRequestMatcher("/ui/swagger-ui/**")).permitAll()
.requestMatchers(new AntPathRequestMatcher("/actuator/health/**")).permitAll()
.requestMatchers("/token").permitAll() // no token needed, as we use the SecureWebTokenFilter instead
.requestMatchers(new AntPathRequestMatcher("/actuator/loggers/**")).hasRole(ApplicationRole.ROLE_MANAGE_APP)

//did document resolve APIs
Expand Down

0 comments on commit 9520502

Please sign in to comment.