Change: public-authenticated routes in auth controller like login, refresh or change-password.

This commit is contained in:
Jose
2026-01-31 01:59:51 +01:00
parent 4303caaf74
commit 681b6a3ba2
2 changed files with 8 additions and 5 deletions

View File

@@ -64,7 +64,10 @@ public class SecurityConfig {
.accessDeniedHandler(accessDeniedHandler) .accessDeniedHandler(accessDeniedHandler)
) )
.authorizeHttpRequests(auth -> auth .authorizeHttpRequests(auth -> auth
.requestMatchers("/auth/**", "/screenshot").permitAll() .requestMatchers("/auth/login").permitAll()
.requestMatchers("/auth/refresh").permitAll()
.requestMatchers("/auth/change-password").permitAll()
.requestMatchers("/screenshot").permitAll()
.anyRequest().authenticated() .anyRequest().authenticated()
); );

View File

@@ -41,7 +41,7 @@ public class AuthController {
return ResponseEntity.ok(authService.register(request)); return ResponseEntity.ok(authService.register(request));
} }
@PostMapping("/refresh") @GetMapping("/refresh")
public ResponseEntity<?> refreshToken(@RequestHeader("Authorization") String authHeader) { public ResponseEntity<?> refreshToken(@RequestHeader("Authorization") String authHeader) {
if (authHeader == null || !authHeader.startsWith("Bearer ")) { if (authHeader == null || !authHeader.startsWith("Bearer ")) {
return ResponseEntity.status(401).body( return ResponseEntity.status(401).body(
@@ -72,9 +72,9 @@ public class AuthController {
String newToken = jwtService.generateToken(userId, serviceId); String newToken = jwtService.generateToken(userId, serviceId);
return ResponseEntity.ok(Map.of( return ResponseEntity.ok(Map.of(
"token", newToken, "token", newToken,
"userId", userId, "userId", userId,
"serviceId", serviceId "serviceId", serviceId
)); ));
} }