Add prometheus EP security

leathermen · Aug 13, 2023 · b844503 · b844503
1 parent ac282d4
commit b844503
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 4 deletions.
diff --git a/.../src/main/java/com/nikitades/carres/infrastructure/spring/security/WebSecurityConfig.java b/.../src/main/java/com/nikitades/carres/infrastructure/spring/security/WebSecurityConfig.java
@@ -31,10 +31,10 @@ public SecurityFilterChain filterChain(HttpSecurity http) throws Exception {
           .permitAll()
           .requestMatchers("/api/*/dashboard/**")
           .hasAnyAuthority("manager")
-          .requestMatchers("/actuator/**", "/open/**", "/api/*/open/**", "/v3/api-docs/**")
-          .permitAll()
           .requestMatchers("/actuator/prometheus")
-          .hasRole("metrics-scraper");
+          .hasAnyAuthority("metrics-scraper")
+          .requestMatchers("/actuator/**", "/open/**", "/api/*/open/**", "/v3/api-docs/**")
+          .permitAll();
         requests.anyRequest().authenticated();
       })
       .oauth2ResourceServer(oauth2 ->

diff --git a/apps/api/src/main/resources/application.yml b/apps/api/src/main/resources/application.yml
@@ -38,7 +38,6 @@ keycloak:
       client-secret: someclientsecret
 
 management:
-  security:
   endpoints:
     web:
       exposure.include: health, prometheus