From a4c01e2e06d2538208eb08c016957d225fbb40c4 Mon Sep 17 00:00:00 2001 From: androidlover5842 Date: Wed, 28 Jan 2026 05:26:56 +0530 Subject: [PATCH] Make room availability endpoints public --- .../com/android/trisolarisserver/security/FirebaseAuthFilter.kt | 2 ++ .../com/android/trisolarisserver/security/SecurityConfig.kt | 2 ++ 2 files changed, 4 insertions(+) diff --git a/src/main/kotlin/com/android/trisolarisserver/security/FirebaseAuthFilter.kt b/src/main/kotlin/com/android/trisolarisserver/security/FirebaseAuthFilter.kt index dc51a9f..df86109 100644 --- a/src/main/kotlin/com/android/trisolarisserver/security/FirebaseAuthFilter.kt +++ b/src/main/kotlin/com/android/trisolarisserver/security/FirebaseAuthFilter.kt @@ -27,6 +27,8 @@ class FirebaseAuthFilter( } return path.matches(Regex("^/properties/[^/]+/rooms/[^/]+/images/[^/]+/file$")) || (path.matches(Regex("^/properties/[^/]+/rooms/[^/]+/images$")) && request.method.equals("GET", true)) + || (path.matches(Regex("^/properties/[^/]+/rooms/available$")) && request.method.equals("GET", true)) + || (path.matches(Regex("^/properties/[^/]+/rooms/by-type/[^/]+$")) && request.method.equals("GET", true)) || (path.matches(Regex("^/properties/[^/]+/room-types$")) && request.method.equals("GET", true)) || path.matches(Regex("^/properties/[^/]+/room-types/[^/]+/images$")) || (path == "/image-tags" && request.method.equals("GET", true)) diff --git a/src/main/kotlin/com/android/trisolarisserver/security/SecurityConfig.kt b/src/main/kotlin/com/android/trisolarisserver/security/SecurityConfig.kt index 02aa11d..c459c53 100644 --- a/src/main/kotlin/com/android/trisolarisserver/security/SecurityConfig.kt +++ b/src/main/kotlin/com/android/trisolarisserver/security/SecurityConfig.kt @@ -28,6 +28,8 @@ class SecurityConfig( it.requestMatchers("/", "/health", "/auth/**").permitAll() it.requestMatchers("/properties/*/rooms/*/images/*/file").permitAll() it.requestMatchers(org.springframework.http.HttpMethod.GET, "/properties/*/rooms/*/images").permitAll() + it.requestMatchers(org.springframework.http.HttpMethod.GET, "/properties/*/rooms/available").permitAll() + it.requestMatchers(org.springframework.http.HttpMethod.GET, "/properties/*/rooms/by-type/*").permitAll() it.requestMatchers(org.springframework.http.HttpMethod.GET, "/properties/*/room-types").permitAll() it.requestMatchers("/properties/*/room-types/*/images").permitAll() it.requestMatchers(org.springframework.http.HttpMethod.GET, "/image-tags").permitAll()