valitydev/org-manager
14
0
Fork 0
mirror of https://github.com/valitydev/org-manager.git synced 2024-11-06 00:15:23 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

fix security + revert parent (#35)

Browse Source 
Co-authored-by: ggmaleva <ggmaleva@yandex.ru>
This commit is contained in:
Gregory 2022-08-29 17:31:57 +03:00 committed by GitHub
parent 48efdc9ea6
commit ae9bd5093c
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
2 changed files with 3 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
pom.xml
View File

@ -6,7 +6,7 @@
<parent> <parent>
<groupId>dev.vality</groupId> <groupId>dev.vality</groupId>
<artifactId>service-parent-pom</artifactId> <artifactId>service-parent-pom</artifactId>
<version>1.0.15</version> <version>1.0.18</version>
</parent> </parent>
<artifactId>org-manager</artifactId> <artifactId>org-manager</artifactId>
@ -46,7 +46,6 @@
<dependency> <dependency>
<groupId>dev.vality</groupId> <groupId>dev.vality</groupId>
<artifactId>damsel</artifactId> <artifactId>damsel</artifactId>
<version>1.568-9362c08</version>
</dependency> </dependency>
<dependency> <dependency>
<groupId>dev.vality</groupId> <groupId>dev.vality</groupId>

2
src/main/java/dev/vality/orgmanager/config/SecurityConfig.java
View File

@ -51,6 +51,8 @@ public class SecurityConfig extends KeycloakWebSecurityConfigurerAdapter {
.authorizeRequests() .authorizeRequests()
.antMatchers(HttpMethod.OPTIONS, "/**").permitAll() .antMatchers(HttpMethod.OPTIONS, "/**").permitAll()
.antMatchers(HttpMethod.GET, "/**/health").permitAll() .antMatchers(HttpMethod.GET, "/**/health").permitAll()
.antMatchers(HttpMethod.GET, "/**/health/readiness").permitAll()
.antMatchers(HttpMethod.GET, "/**/health/liveness").permitAll()
.antMatchers("/**/auth-context").permitAll() .antMatchers("/**/auth-context").permitAll()
.antMatchers(HttpMethod.GET, "/**/prometheus").permitAll() .antMatchers(HttpMethod.GET, "/**/prometheus").permitAll()
.anyRequest().authenticated(); .anyRequest().authenticated();