diff options
| author |  Vitaly Takmazov | 2017-11-01 01:57:08 +0300 |
|---|---|---|
| committer | Vitaly Takmazov | 2017-11-01 01:57:08 +0300 |
| commit | 3e87cc6a73fbfc165f81d5f7a3d7d1f76e7feb9a (patch) | |
| tree | 68023133cec4261e38fa9ed56d26626553847e21 /juick-www/src/main/java/com/juick/www/configuration | |
| parent | 20e19b4242f888aafe3c55f9dabe3af46728cbab (diff) | |
www: /post should not throw if img or attach is present
Diffstat (limited to 'juick-www/src/main/java/com/juick/www/configuration')
| -rw-r--r-- | juick-www/src/main/java/com/juick/www/configuration/WebSecurityConfig.java | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/juick-www/src/main/java/com/juick/www/configuration/WebSecurityConfig.java b/juick-www/src/main/java/com/juick/www/configuration/WebSecurityConfig.java index 3dc7bc76..231c6e2e 100644 --- a/juick-www/src/main/java/com/juick/www/configuration/WebSecurityConfig.java +++ b/juick-www/src/main/java/com/juick/www/configuration/WebSecurityConfig.java @@ -72,7 +72,7 @@ public class WebSecurityConfig extends WebSecurityConfigurerAdapter { http.addFilterAfter(hashParamAuthenticationFilter(), BasicAuthenticationFilter.class); http .authorizeRequests() - .antMatchers("/settings", "/pm/**", "/**/bl", "/_twitter").authenticated() + .antMatchers("/settings", "/pm/**", "/**/bl", "/_twitter", "/post", "/comment").authenticated() .anyRequest().permitAll() .and() .anonymous().principal(JuickUser.ANONYMOUS_USER).authorities(JuickUser.ANONYMOUS_AUTHORITY) |