Fix NamespaceHttpInterceptUrlTests

This commit is contained in:
Rob Winch 2021-07-08 16:14:38 -05:00
parent d67f0bf291
commit 2a62c4d976
1 changed files with 2 additions and 2 deletions

View File

@ -121,12 +121,12 @@ HttpMethod.POST, "/admin/post", "/admin/another-post/**").hasRole("ADMIN")
.antMatchers("/signup").permitAll()
.anyRequest().hasRole("USER")
.and()
.requiresChannel().antMatchers(
.requiresChannel().antMatchers("/login", "/secured/**")
// NOTE: channel security is configured separately of authorization (i.e. intercept-url@access
// the line below is similar to intercept-url@requires-channel="https":
// <intercept-url pattern="/login" requires-channel="https"/>
//" requires-channel="https"/>
"/login", "/secured/**").requiresSecure().anyRequest()..requiresInsecure();
.requiresSecure().anyRequest().requiresInsecure();
// @formatter:on
}