fix: always allow API documentation route

intranda · Sep 18, 2024 · 734b96b · 734b96b
1 parent aaf9a78
commit 734b96b
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/module-core/src/main/java/io/goobi/vocabulary/security/SecurityConfiguration.java b/module-core/src/main/java/io/goobi/vocabulary/security/SecurityConfiguration.java
@@ -23,8 +23,8 @@ public SecurityConfiguration(BearerTokenAuthFilter bearerTokenAuthFilter) {
     public SecurityFilterChain securityFilterChain(HttpSecurity http) throws Exception {
         http.csrf(AbstractHttpConfigurer::disable)
                 .authorizeHttpRequests(auth -> auth
-                        .dispatcherTypeMatchers(DispatcherType.ASYNC)
-                        .permitAll()
+                        .dispatcherTypeMatchers(DispatcherType.ASYNC).permitAll()
+                        .requestMatchers("/docs/**").permitAll()
                         .anyRequest()
                         .authenticated()
                 )