diff --git a/core/core-security/src/main/java/com/pgms/coresecurity/security/config/WebSecurityConfig.java b/core/core-security/src/main/java/com/pgms/coresecurity/security/config/WebSecurityConfig.java index c8958999..1af59f93 100644 --- a/core/core-security/src/main/java/com/pgms/coresecurity/security/config/WebSecurityConfig.java +++ b/core/core-security/src/main/java/com/pgms/coresecurity/security/config/WebSecurityConfig.java @@ -96,9 +96,14 @@ private RequestMatcher[] requestPermitAll() { antMatcher("/swagger-ui/**"), antMatcher("/swagger-ui"), antMatcher("/swagger-ui.html"), - antMatcher("/v2/api-docs"), - antMatcher("/v3/api-docs"), - antMatcher("/webjars/**") + antMatcher("/swagger/**"), + antMatcher("/swagger-resources/**"), + antMatcher("/v3/api-docs/**"), + antMatcher("/webjars/**"), + + // H2-CONSOLE + antMatcher("/h2-console/**") + ); return requestMatchers.toArray(RequestMatcher[]::new); } @@ -238,8 +243,10 @@ private void configureCommonSecuritySettings(HttpSecurity http) throws Exception .formLogin().disable() .httpBasic().disable() .rememberMe().disable() + .headers().frameOptions().disable().and() .logout().disable() .sessionManagement() .sessionCreationPolicy(SessionCreationPolicy.STATELESS); + } }