Merge pull request #351 from bcgov/feature/redis-update

Add actuator to exclusion
bcgov · Sep 25, 2023 · 95d67cf · 95d67cf
2 parents e7e9aa3 + 68e109f
commit 95d67cf
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/...ai-reviewer-api/src/main/java/ca/bc/gov/open/jag/aireviewerapi/config/SecurityConfig.java b/...ai-reviewer-api/src/main/java/ca/bc/gov/open/jag/aireviewerapi/config/SecurityConfig.java
@@ -33,7 +33,9 @@ public SecurityFilterChain filterChain(HttpSecurity http) throws Exception {
 
 		http.csrf(httpSecurityCsrfConfigurer -> httpSecurityCsrfConfigurer.disable());
 
-		http.authorizeHttpRequests(requests -> requests.anyRequest().authenticated());
+		http.authorizeHttpRequests(requests -> requests
+						.requestMatchers("/actuator/**").permitAll()
+						.anyRequest().authenticated());
 
 		http.oauth2ResourceServer((oauth2) -> oauth2.jwt(jwt -> jwt.jwtAuthenticationConverter(keycloakJwtAuthConverter)));