fix: not blocking actuator anymore

Arquisoft · Apr 24, 2024 · fc16989 · fc16989
1 parent df786c7
commit fc16989
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/api/src/main/java/lab/en2b/quizapi/auth/config/SecurityConfig.java b/api/src/main/java/lab/en2b/quizapi/auth/config/SecurityConfig.java
@@ -64,6 +64,7 @@ public SecurityFilterChain securityFilterChain(HttpSecurity http, Authentication
                         .requestMatchers(HttpMethod.GET,"/users","/users/**").permitAll()
                         .requestMatchers(HttpMethod.GET,"/auth/logout").authenticated()
                         .requestMatchers(HttpMethod.POST,"/auth/**").permitAll()
+                        .requestMatchers(HttpMethod.GET, "/actuator/**").permitAll()
                         .requestMatchers(HttpMethod.GET, "/swagger/**").permitAll()
                         .anyRequest().authenticated())
                 .csrf(AbstractHttpConfigurer::disable)