Merge pull request #15 from JuribaDev/fix-security-config

Hot fix Security Config
JuribaDev · Aug 20, 2024 · 18354d2 · 18354d2
2 parents b6c95bd + 437d1c1
commit 18354d2
Showing 1 changed file with 1 addition and 3 deletions.
diff --git a/src/main/java/com/juriba/tracker/auth/infrastructure/config/SecurityConfig.java b/src/main/java/com/juriba/tracker/auth/infrastructure/config/SecurityConfig.java
@@ -68,8 +68,6 @@ public SecurityFilterChain securityFilterChain(HttpSecurity http) throws Excepti
                         .requestMatchers(securityPathConfig.publicPathsMatcher()).permitAll()
                         .requestMatchers(securityPathConfig.adminPathsMatcher()).hasRole("ADMIN")
                         .anyRequest().authenticated()
-
-
                 )
                 .csrf(AbstractHttpConfigurer::disable)
                 .headers(headers -> headers.frameOptions(HeadersConfigurer.FrameOptionsConfig::disable))
@@ -79,7 +77,7 @@ public SecurityFilterChain securityFilterChain(HttpSecurity http) throws Excepti
                 .exceptionHandling(exceptions -> exceptions
                         .authenticationEntryPoint(customAuthenticationEntryPoint))
                 .addFilterBefore(new RateLimitingFilter(rateLimitingService,objectMapper), UsernamePasswordAuthenticationFilter.class)
-                .addFilterAfter(jwtAuthenticationFilter(), AuthorizationFilter.class);
+                .addFilterAfter(jwtAuthenticationFilter(), UsernamePasswordAuthenticationFilter.class);
 
 
         return http.build();