BAEL-315 really lock down the discovery server
This commit is contained in:
parent
b7ec6f3e4c
commit
846006cb6a
|
@ -40,6 +40,8 @@ public class SecurityConfig extends WebSecurityConfigurerAdapter {
|
||||||
protected void configure(HttpSecurity http) throws Exception {
|
protected void configure(HttpSecurity http) throws Exception {
|
||||||
http
|
http
|
||||||
.authorizeRequests()
|
.authorizeRequests()
|
||||||
|
.antMatchers("/eureka/js/**","/eureka/css/**","/eureka/images/**","/eureka/fonts/**").authenticated()
|
||||||
|
.antMatchers("/eureka/**").hasRole("SYSTEM")
|
||||||
.antMatchers(HttpMethod.GET, "/").hasRole("ADMIN")
|
.antMatchers(HttpMethod.GET, "/").hasRole("ADMIN")
|
||||||
.anyRequest().authenticated()
|
.anyRequest().authenticated()
|
||||||
.and()
|
.and()
|
||||||
|
|
Loading…
Reference in New Issue