BAEL-315 really lock down the discovery server

This commit is contained in:
Tim Schimandle 2016-10-03 18:18:30 -06:00
parent b7ec6f3e4c
commit 846006cb6a
1 changed files with 2 additions and 0 deletions

View File

@ -40,6 +40,8 @@ public class SecurityConfig extends WebSecurityConfigurerAdapter {
protected void configure(HttpSecurity http) throws Exception {
http
.authorizeRequests()
.antMatchers("/eureka/js/**","/eureka/css/**","/eureka/images/**","/eureka/fonts/**").authenticated()
.antMatchers("/eureka/**").hasRole("SYSTEM")
.antMatchers(HttpMethod.GET, "/").hasRole("ADMIN")
.anyRequest().authenticated()
.and()