BAEL-315 really lock down the discovery server
This commit is contained in:
parent
b7ec6f3e4c
commit
846006cb6a
|
@ -40,6 +40,8 @@ public class SecurityConfig extends WebSecurityConfigurerAdapter {
|
|||
protected void configure(HttpSecurity http) throws Exception {
|
||||
http
|
||||
.authorizeRequests()
|
||||
.antMatchers("/eureka/js/**","/eureka/css/**","/eureka/images/**","/eureka/fonts/**").authenticated()
|
||||
.antMatchers("/eureka/**").hasRole("SYSTEM")
|
||||
.antMatchers(HttpMethod.GET, "/").hasRole("ADMIN")
|
||||
.anyRequest().authenticated()
|
||||
.and()
|
||||
|
|
Loading…
Reference in New Issue