Authorize actuator path for all requests

opexdev · Oct 4, 2023 · 851dd51 · 851dd51
1 parent 0d4c7b1
commit 851dd51
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 1 deletion.
diff --git a/config/config-app/src/main/kotlin/co/nilin/opex/config/app/config/SecurityConfig.kt b/config/config-app/src/main/kotlin/co/nilin/opex/config/app/config/SecurityConfig.kt
@@ -23,6 +23,7 @@ class SecurityConfig {
     fun securityFilterChain(http: HttpSecurity): SecurityFilterChain {
         http.csrf().disable()
             .authorizeHttpRequests()
+            .requestMatchers("/actuator/**").permitAll()
             .requestMatchers("/web/**").hasRole("SCOPE_trust", "admin_system")
             .requestMatchers("/user/**").hasAuthority("SCOPE_trust")
             .and()

diff --git a/config/pom.xml b/config/pom.xml
@@ -24,7 +24,7 @@
         <java.version>17</java.version>
         <spring-cloud.version>2022.0.4</spring-cloud.version>
         <kotlin.version>1.8.0</kotlin.version>
-        <spring.version>3.1.4</spring.version>
+        <spring.version>3.0.10</spring.version>
     </properties>
 
     <dependencies>