Analytics 서비스 인증 제거 - 전체 접근 허용
- SecurityConfig를 content-service처럼 단순화 - 모든 요청에 대해 인증 없이 접근 가능하도록 변경 - Swagger UI 및 API 엔드포인트 접근 문제 해결 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude <noreply@anthropic.com>
This commit is contained in:
parent
2663baf615
commit
b92307d564
@ -39,16 +39,7 @@ public class SecurityConfig {
|
|||||||
.cors(cors -> cors.configurationSource(corsConfigurationSource()))
|
.cors(cors -> cors.configurationSource(corsConfigurationSource()))
|
||||||
.sessionManagement(session -> session.sessionCreationPolicy(SessionCreationPolicy.STATELESS))
|
.sessionManagement(session -> session.sessionCreationPolicy(SessionCreationPolicy.STATELESS))
|
||||||
.authorizeHttpRequests(auth -> auth
|
.authorizeHttpRequests(auth -> auth
|
||||||
// Actuator endpoints
|
.anyRequest().permitAll()
|
||||||
.requestMatchers("/actuator/**").permitAll()
|
|
||||||
// Swagger UI endpoints
|
|
||||||
.requestMatchers("/swagger-ui/**", "/swagger-ui.html", "/v3/api-docs/**", "/swagger-resources/**", "/webjars/**").permitAll()
|
|
||||||
// Health check
|
|
||||||
.requestMatchers("/health").permitAll()
|
|
||||||
// Analytics API endpoints (context-path 제거된 실제 경로)
|
|
||||||
.requestMatchers("/events/**", "/users/**").permitAll()
|
|
||||||
// All other requests require authentication
|
|
||||||
.anyRequest().authenticated()
|
|
||||||
)
|
)
|
||||||
.addFilterBefore(new JwtAuthenticationFilter(jwtTokenProvider),
|
.addFilterBefore(new JwtAuthenticationFilter(jwtTokenProvider),
|
||||||
UsernamePasswordAuthenticationFilter.class)
|
UsernamePasswordAuthenticationFilter.class)
|
||||||
|
|||||||
Loading…
x
Reference in New Issue
Block a user