Skip to content

Commit a344182

Browse files
committed
Allow unauthenticated access to integration API
Added '/api/v2/integration/**' to the list of request matchers ignored by CSRF protection in production security config. This change enables unauthenticated or CSRF-exempt access to integration endpoints.
1 parent 183194f commit a344182

File tree

1 file changed

+1
-0
lines changed

1 file changed

+1
-0
lines changed

turing-app/src/main/java/com/viglet/turing/spring/security/TurSecurityConfigProduction.java

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -90,6 +90,7 @@ SecurityFilterChain filterChain(HttpSecurity http,
9090
.csrfTokenRequestHandler(new TurSpaCsrfTokenRequestHandler())
9191
.ignoringRequestMatchers(
9292
mvc.matcher("/api/genai/chat"),
93+
mvc.matcher("/api/v2/integration/**"),
9394
mvc.matcher("/api/sn/**"),
9495
mvc.matcher(ERROR_PATH),
9596
mvc.matcher("/logout"),

0 commit comments

Comments
 (0)