hotfix: add public access for /v1/experiment-posts/counts and /v1/exp…

…eriment-posts/{postId} (#30)
YAPP-Github · Jan 26, 2025 · ae17910 · ae17910
1 parent 64aab5a
commit ae17910
Showing 1 changed file with 4 additions and 2 deletions.
diff --git a/src/main/kotlin/com/dobby/backend/presentation/api/config/WebSecurityConfig.kt b/src/main/kotlin/com/dobby/backend/presentation/api/config/WebSecurityConfig.kt
@@ -25,15 +25,17 @@ class WebSecurityConfig {
         jwtTokenProvider: JwtTokenProvider,
         handlerExceptionResolver: HandlerExceptionResolver
     ): SecurityFilterChain = httpSecurity
-        .securityMatcher("/v1/auth/**", "/v1/members/signup/**", "/v1/emails/**")
+        .securityMatcher("/v1/auth/**", "/v1/members/signup/**", "/v1/emails/**",
+            "/v1/experiment-posts/counts", "/v1/experiment-posts/{postId}/**")
         .csrf { it.disable() }
         .cors(Customizer.withDefaults())
         .sessionManagement {
             it.sessionCreationPolicy(SessionCreationPolicy.STATELESS)
         }
         .authorizeHttpRequests {
             it.requestMatchers("/v1/auth/**").permitAll()
-            it.requestMatchers("/v1/members/signup/**", "/v1/emails/**").permitAll()
+            it.requestMatchers("/v1/members/signup/**", "/v1/emails/**",
+                "/v1/experiment-posts/counts", "/v1/experiment-posts/{postId}/**").permitAll()
             it.anyRequest().authenticated()
         }
         .build()