From 397bc4ede3ecabe53f9b04542c3134f8dd29a858 Mon Sep 17 00:00:00 2001 From: androidlover5842 Date: Mon, 26 Jan 2026 21:04:24 +0530 Subject: [PATCH] enable security config --- .../android/trisolarisserver/security/SecurityConfig.kt | 8 +++++++- 1 file changed, 7 insertions(+), 1 deletion(-) diff --git a/src/main/kotlin/com/android/trisolarisserver/security/SecurityConfig.kt b/src/main/kotlin/com/android/trisolarisserver/security/SecurityConfig.kt index 5c52d93..eedfb7b 100644 --- a/src/main/kotlin/com/android/trisolarisserver/security/SecurityConfig.kt +++ b/src/main/kotlin/com/android/trisolarisserver/security/SecurityConfig.kt @@ -2,12 +2,16 @@ package com.android.trisolarisserver.security import org.springframework.context.annotation.Bean import org.springframework.context.annotation.Configuration +import org.springframework.security.config.annotation.method.configuration.EnableMethodSecurity +import org.springframework.security.config.annotation.web.configuration.EnableWebSecurity import org.springframework.security.config.annotation.web.builders.HttpSecurity import org.springframework.security.config.http.SessionCreationPolicy import org.springframework.security.web.SecurityFilterChain import org.springframework.security.web.authentication.UsernamePasswordAuthenticationFilter -@Configuration +@Configuration(proxyBeanMethods = false) +@EnableWebSecurity +@EnableMethodSecurity class SecurityConfig( private val firebaseAuthFilter: FirebaseAuthFilter ) { @@ -20,6 +24,8 @@ class SecurityConfig( it.requestMatchers("/", "/health", "/auth/**").permitAll() it.anyRequest().authenticated() } + .httpBasic { it.disable() } + .formLogin { it.disable() } .addFilterBefore(firebaseAuthFilter, UsernamePasswordAuthenticationFilter::class.java) return http.build() }