juick-api: /thread is also available to anonymous

2 files changed, 1 insertions, 4 deletions

diff --git a/juick-api/src/main/java/com/juick/api/configuration/ApiSecurityConfig.java b/juick-api/src/main/java/com/juick/api/configuration/ApiSecurityConfig.java
index 46e1725b..9f937c98 100644
--- a/juick-api/src/main/java/com/juick/api/configuration/ApiSecurityConfig.java
+++ b/juick-api/src/main/java/com/juick/api/configuration/ApiSecurityConfig.java
@@ -43,7 +43,7 @@ public class ApiSecurityConfig extends WebSecurityConfigurerAdapter {
     protected void configure(HttpSecurity http) throws Exception {
         http.authorizeRequests()
                 .antMatchers(HttpMethod.OPTIONS).permitAll()
-                .antMatchers("/messages", "/users").permitAll()
+                .antMatchers("/messages", "/users", "/thread").permitAll()
                 .anyRequest().hasRole("USER")
                 .and().httpBasic().authenticationEntryPoint(getJuickAuthenticationEntryPoint())
                 .and().anonymous()
diff --git a/juick-api/src/test/java/com/juick/api/tests/MessagesTests.java b/juick-api/src/test/java/com/juick/api/tests/MessagesTests.java
index 9425a819..33704fc5 100644
--- a/juick-api/src/test/java/com/juick/api/tests/MessagesTests.java
+++ b/juick-api/src/test/java/com/juick/api/tests/MessagesTests.java
@@ -113,9 +113,6 @@ public class MessagesTests {
         mockMvc.perform(get("/home"))
                 .andExpect(status().is4xxClientError());
 
-        mockMvc.perform(get("/thread"))
-                .andExpect(status().is4xxClientError());
-
         mockMvc.perform(get("/messages/recommended"))
                 .andExpect(status().is4xxClientError());