Allow public room types list
All checks were successful
build-and-deploy / build-deploy (push) Successful in 34s

This commit is contained in:
androidlover5842
2026-01-27 17:12:50 +05:30
parent d4f8ea96e0
commit 2b01ed3859
3 changed files with 5 additions and 2 deletions

View File

@@ -40,8 +40,9 @@ class RoomTypes(
@PathVariable propertyId: UUID, @PathVariable propertyId: UUID,
@AuthenticationPrincipal principal: MyPrincipal? @AuthenticationPrincipal principal: MyPrincipal?
): List<RoomTypeResponse> { ): List<RoomTypeResponse> {
requirePrincipal(principal) if (principal != null) {
propertyAccess.requireMember(propertyId, principal!!.userId) propertyAccess.requireMember(propertyId, principal.userId)
}
return roomTypeRepo.findByPropertyIdOrderByCode(propertyId).map { it.toResponse() } return roomTypeRepo.findByPropertyIdOrderByCode(propertyId).map { it.toResponse() }
} }

View File

@@ -26,6 +26,7 @@ class FirebaseAuthFilter(
return true return true
} }
return path.matches(Regex("^/properties/[^/]+/rooms/[^/]+/images/[^/]+/file$")) return path.matches(Regex("^/properties/[^/]+/rooms/[^/]+/images/[^/]+/file$"))
|| path.matches(Regex("^/properties/[^/]+/room-types$"))
} }
override fun doFilterInternal( override fun doFilterInternal(

View File

@@ -27,6 +27,7 @@ class SecurityConfig(
.authorizeHttpRequests { .authorizeHttpRequests {
it.requestMatchers("/", "/health", "/auth/**").permitAll() it.requestMatchers("/", "/health", "/auth/**").permitAll()
it.requestMatchers("/properties/*/rooms/*/images/*/file").permitAll() it.requestMatchers("/properties/*/rooms/*/images/*/file").permitAll()
it.requestMatchers("/properties/*/room-types").permitAll()
it.anyRequest().authenticated() it.anyRequest().authenticated()
} }
.exceptionHandling { .exceptionHandling {