From d6faaba01ce52561fecedaee28b8355e33dc2be8 Mon Sep 17 00:00:00 2001 From: Teriuihi Date: Sun, 22 Jun 2025 01:15:45 +0200 Subject: [PATCH] Update security configuration to allow unrestricted access Changed default security rule to permit all requests instead of requiring authentication. Adjusted `SecurityConfig` to ensure open access for all endpoints. --- .../main/java/com/alttd/altitudeweb/config/SecurityConfig.java | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/backend/src/main/java/com/alttd/altitudeweb/config/SecurityConfig.java b/backend/src/main/java/com/alttd/altitudeweb/config/SecurityConfig.java index 6fe956c..8973994 100644 --- a/backend/src/main/java/com/alttd/altitudeweb/config/SecurityConfig.java +++ b/backend/src/main/java/com/alttd/altitudeweb/config/SecurityConfig.java @@ -40,7 +40,7 @@ public class SecurityConfig { .requestMatchers("/team/**", "/history/**").permitAll() .requestMatchers("/form/**").hasAuthority(PermissionClaimDto.USER.getValue()) .requestMatchers("/head_mod/**").hasAuthority(PermissionClaimDto.HEAD_MOD.getValue()) - .anyRequest().authenticated() + .anyRequest().permitAll() ) .oauth2ResourceServer(oauth2 -> oauth2.jwt(Customizer.withDefaults())) .sessionManagement(session -> session.sessionCreationPolicy(SessionCreationPolicy.STATELESS))