forgot to push backend

hooverdc · Apr 23, 2024 · fd9d819 · fd9d819
1 parent 0e7a7ba
commit fd9d819
Showing 1 changed file with 5 additions and 3 deletions.
diff --git a/...BootBackEnd/demo/src/main/java/com/nationalParkApp/demo/Config/ProjectSecurityConfig.java b/...BootBackEnd/demo/src/main/java/com/nationalParkApp/demo/Config/ProjectSecurityConfig.java
@@ -43,13 +43,15 @@ public CorsConfiguration getCorsConfiguration(HttpServletRequest request) {
                 return config;
             }
 
-        })).csrf((csrf) -> csrf.csrfTokenRequestHandler(requestHandler).ignoringRequestMatchers( "/register","/user","/api/v1/**")
+        })).csrf((csrf) -> csrf.csrfTokenRequestHandler(requestHandler).ignoringRequestMatchers( "/register","/user")
                                 .csrfTokenRepository(CookieCsrfTokenRepository.withHttpOnlyFalse()))
                         .addFilterAfter(new CsrfCookieFilter(), BasicAuthenticationFilter.class)
                         .authorizeHttpRequests((requests)->requests
 
-                                //.requestMatchers("/createreview").authenticated()
-                                .requestMatchers("/register","/user","/api/v1/**").permitAll())
+                                /*.requestMatchers("/createreview","/itinerary", "/addFavorites", "/favorites", "/favorites/*", "/editreview/*").authenticated()
+                                .requestMatchers("/register","/user", "/reviews").permitAll())*/
+                .requestMatchers("/api/v1/**", "/createreview").authenticated()
+                .requestMatchers("/register","/user", "/reviews").permitAll())
 
                         .formLogin(Customizer.withDefaults())
                         .httpBasic(Customizer.withDefaults());