[COT-178] Hotfix: 세션과 연결된 교육 할당 API 권한 추가 해결 (#282)

IT-Cotato · Jan 22, 2025 · 557912f · 557912f
1 parent dfea804
commit 557912f
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/src/main/java/org/cotato/csquiz/common/config/SecurityConfig.java b/src/main/java/org/cotato/csquiz/common/config/SecurityConfig.java
@@ -25,6 +25,7 @@
 @RequiredArgsConstructor
 public class SecurityConfig {
 
+    private static final String SESSION_PATH = "/v1/api/session/**";
     private static final String[] WHITE_LIST = {
             "/v1/api/auth/**",
             "/login",
@@ -73,6 +74,7 @@ public SecurityFilterChain filterChain(HttpSecurity http) throws Exception {
                 .addFilter(corsFilter)
                 .authorizeHttpRequests(request -> request
                                 .requestMatchers(CorsUtils::isPreFlightRequest).permitAll()
+                                .requestMatchers(new AntPathRequestMatcher(SESSION_PATH, HttpMethod.GET.name())).permitAll()
                                 .requestMatchers(WHITE_LIST).permitAll()
                                 .anyRequest().authenticated()
                 );