Require authentication for backend proxy

This commit is contained in:
litoral05
2026-06-03 14:39:23 +01:00
parent 45419f23c1
commit 102e906b36
@@ -21,6 +21,10 @@ public class SecurityConfig {
return http return http
.csrf(csrf -> csrf.disable()) .csrf(csrf -> csrf.disable())
.authorizeHttpRequests(auth -> auth .authorizeHttpRequests(auth -> auth
.requestMatchers("/auth/**").permitAll()
.requestMatchers("/debug/**").permitAll()
.requestMatchers("/admin/**").permitAll()
.requestMatchers("/api/backend/**").authenticated()
.anyRequest().permitAll() .anyRequest().permitAll()
) )
.addFilterBefore(jwtAuthenticationFilter, UsernamePasswordAuthenticationFilter.class) .addFilterBefore(jwtAuthenticationFilter, UsernamePasswordAuthenticationFilter.class)