Make the security config explicitly explicit

leathermen · Aug 13, 2023 · c5aebd2 · c5aebd2
1 parent 086674d
commit c5aebd2
Showing 1 changed file with 5 additions and 3 deletions.
diff --git a/.../src/main/java/com/nikitades/carres/infrastructure/spring/security/WebSecurityConfig.java b/.../src/main/java/com/nikitades/carres/infrastructure/spring/security/WebSecurityConfig.java
@@ -31,10 +31,12 @@ public SecurityFilterChain filterChain(HttpSecurity http) throws Exception {
           .permitAll()
           .requestMatchers("/api/*/dashboard/**")
           .hasAnyAuthority("manager")
+          .requestMatchers("/open/**", "/api/*/open/**", "/v3/api-docs/**")
+          .permitAll()
+          .requestMatchers("/actuator/health")
+          .permitAll()
           .requestMatchers("/actuator/prometheus")
-          .hasAnyAuthority("metrics-scraper")
-          .requestMatchers("/actuator/**", "/open/**", "/api/*/open/**", "/v3/api-docs/**")
-          .permitAll();
+          .hasAnyAuthority("metrics-scraper");
         requests.anyRequest().authenticated();
       })
       .oauth2ResourceServer(oauth2 ->