Refactor: swagger에 대해 권한 허가

HongikGraduationProject · May 30, 2024 · 862ccca · 862ccca
1 parent df9aac8
commit 862ccca
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 2 deletions.
diff --git a/src/main/java/com/hongik/graduationproject/config/SecurityConfig.java b/src/main/java/com/hongik/graduationproject/config/SecurityConfig.java
@@ -36,7 +36,11 @@ protected SecurityFilterChain configure(HttpSecurity httpSecurity) throws Except
                 .sessionManagement((sessionManagement) ->
                         sessionManagement.sessionCreationPolicy(SessionCreationPolicy.STATELESS))
                 .authorizeHttpRequests((authorizeHttpRequests) ->
-                        authorizeHttpRequests.requestMatchers( "/api/oauth/**").permitAll().anyRequest().authenticated());
+                        authorizeHttpRequests
+                                .requestMatchers( "/api/auth/**").permitAll()
+                                .requestMatchers( "/v3/api-docs/**").permitAll()
+                                .requestMatchers( "/swagger-ui/**").permitAll()
+                                .anyRequest().authenticated());
 
         httpSecurity.addFilterBefore(jwtAuthenticationFilter, UsernamePasswordAuthenticationFilter.class);
 

diff --git a/src/main/java/com/hongik/graduationproject/jwt/JwtAuthenticationFilter.java b/src/main/java/com/hongik/graduationproject/jwt/JwtAuthenticationFilter.java
@@ -38,7 +38,7 @@ private void setAuthentication(String accessToken) {
     @Override
     protected boolean shouldNotFilter(HttpServletRequest request) {
         String path = request.getRequestURI();
-        return path.startsWith("/api/auth") || path.startsWith("/swagger-ui");
+        return path.startsWith("/api/auth") || path.startsWith("/v3/api-docs") || path.startsWith("/swagger-ui");
     }
 
     private String parseBearerToken(HttpServletRequest request) {