SUPPORT-9170: deny version request

2025-05-16 13:16:43 +03:00 · 2025-05-16 13:16:43 +03:00 · 7a0d568de1
commit 7a0d568de1
parent fdf59ecbce
1 changed files with 2 additions and 0 deletions
--- a/backend/src/main/java/ru/micord/ervu/security/SecurityConfig.java
+++ b/backend/src/main/java/ru/micord/ervu/security/SecurityConfig.java
@ -60,6 +60,8 @@ public class SecurityConfig {
    http.authorizeHttpRequests(
            (authorizeHttpRequests) -> authorizeHttpRequests.requestMatchers(PERMIT_ALL)
                .permitAll()
+                .requestMatchers("/version")
+                .denyAll()
                .anyRequest()
                .authenticated())
        .csrf((csrf) -> csrf.csrfTokenRepository(tokenRepository)