fix: authentication to some routes

Signed-off-by: MatheusVict <[email protected]>
Hangar-Tech · Mar 7, 2024 · 2ddc273 · 2ddc273
1 parent 46b5752
commit 2ddc273
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/...itutosemprealerta/semprealerta/infrastructure/config/security/SecurityConfigurations.java b/...itutosemprealerta/semprealerta/infrastructure/config/security/SecurityConfigurations.java
@@ -47,10 +47,13 @@ public SecurityFilterChain securityFilterChain(HttpSecurity httpSecurity) throws
                         .requestMatchers(ACTUATOR_WHITELIST).permitAll()
                         .requestMatchers(HttpMethod.POST, "/auth/login").permitAll()
                         .requestMatchers("/api/v1/user/**").hasRole("ADMIN")
+                        .requestMatchers(HttpMethod.GET, "/api/v1/posts/**").permitAll()
+                        .requestMatchers(HttpMethod.GET, "/api/v1/files/**").permitAll()
                         .requestMatchers(HttpMethod.POST, "/api/v1/files/upload").hasRole("ADMIN")
                         .requestMatchers(HttpMethod.POST, "/api/v1/posts/").hasRole("ADMIN")
                         .requestMatchers(HttpMethod.PUT, "/api/v1/posts/**").hasRole("ADMIN")
                         .requestMatchers(HttpMethod.DELETE, "/api/v1/posts/**").hasRole("ADMIN")
+                        .requestMatchers("/api/v1/user/**").hasRole("ADMIN")
                         .anyRequest().authenticated()
                 )
                 .addFilterBefore(securtityFilter, UsernamePasswordAuthenticationFilter.class)