diff --git a/src/main/kotlin/com/android/trisolarisserver/security/SecurityConfig.kt b/src/main/kotlin/com/android/trisolarisserver/security/SecurityConfig.kt index 5c52d93..eedfb7b 100644 --- a/src/main/kotlin/com/android/trisolarisserver/security/SecurityConfig.kt +++ b/src/main/kotlin/com/android/trisolarisserver/security/SecurityConfig.kt @@ -2,12 +2,16 @@ package com.android.trisolarisserver.security import org.springframework.context.annotation.Bean import org.springframework.context.annotation.Configuration +import org.springframework.security.config.annotation.method.configuration.EnableMethodSecurity +import org.springframework.security.config.annotation.web.configuration.EnableWebSecurity import org.springframework.security.config.annotation.web.builders.HttpSecurity import org.springframework.security.config.http.SessionCreationPolicy import org.springframework.security.web.SecurityFilterChain import org.springframework.security.web.authentication.UsernamePasswordAuthenticationFilter -@Configuration +@Configuration(proxyBeanMethods = false) +@EnableWebSecurity +@EnableMethodSecurity class SecurityConfig( private val firebaseAuthFilter: FirebaseAuthFilter ) { @@ -20,6 +24,8 @@ class SecurityConfig( it.requestMatchers("/", "/health", "/auth/**").permitAll() it.anyRequest().authenticated() } + .httpBasic { it.disable() } + .formLogin { it.disable() } .addFilterBefore(firebaseAuthFilter, UsernamePasswordAuthenticationFilter::class.java) return http.build() }