BAEL-315 really lock down the discovery server
This commit is contained in:
parent
d226ad2999
commit
4029a3f547
@ -40,6 +40,8 @@ public class SecurityConfig extends WebSecurityConfigurerAdapter {
|
||||
protected void configure(HttpSecurity http) throws Exception {
|
||||
http
|
||||
.authorizeRequests()
|
||||
.antMatchers("/eureka/js/**","/eureka/css/**","/eureka/images/**","/eureka/fonts/**").authenticated()
|
||||
.antMatchers("/eureka/**").hasRole("SYSTEM")
|
||||
.antMatchers(HttpMethod.GET, "/").hasRole("ADMIN")
|
||||
.anyRequest().authenticated()
|
||||
.and()
|
||||
|
Loading…
x
Reference in New Issue
Block a user