itfirst/sake
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fo bo 머지작업 - 오류수정

Browse Source
This commit is contained in:
jazz
2025-12-01 12:04:52 +09:00
parent 99eb2d1e58
commit 23028a50fe
7 changed files with 170 additions and 152 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
src/main/java/com/wb/domainserver/security/config/ResourceServerConfig.java
View File

@@ -40,6 +40,7 @@ import org.springframework.security.authorization.method.AuthorizationManagerBef
import org.springframework.security.config.annotation.web.builders.HttpSecurity;
import org.springframework.security.config.annotation.web.configuration.EnableWebSecurity;
import org.springframework.security.config.annotation.web.configurers.AbstractHttpConfigurer;
import org.springframework.security.config.annotation.web.configurers.HeadersConfigurer;
import org.springframework.security.crypto.bcrypt.BCryptPasswordEncoder;
import org.springframework.security.web.SecurityFilterChain;
import org.springframework.security.web.authentication.logout.LogoutFilter;
@@ -112,8 +113,9 @@ public class ResourceServerConfig {
OrRequestMatcher resourceMatchers = new OrRequestMatcher(resourcePath);
return http
.csrf(AbstractHttpConfigurer::disable)
.securityMatcher("/sopmal/**", "/oauth2/**", "/login/oauth2/**")
.headers((headers)->headers.frameOptions(HeadersConfigurer.FrameOptionsConfig::sameOrigin))
.csrf(AbstractHttpConfigurer::disable)
.authorizeHttpRequests(authorize ->
authorize
.requestMatchers(authMatchers).authenticated()
@@ -144,7 +146,6 @@ public class ResourceServerConfig {
.deleteCookies("JSESSIONID")
.logoutSuccessHandler(new CustomLogoutSuccessHandler())
)
.build();
}