From 62980ac9a776d15b9ec88a1a2f984fd183a4bd24 Mon Sep 17 00:00:00 2001
From: Vitaly Takmazov
Date: Sat, 3 Dec 2022 14:03:53 +0300
Subject: Add missing security configuration for h2 console

---
 src/main/java/com/juick/config/SecurityConfig.java | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

(limited to 'src/main/java/com/juick/config/SecurityConfig.java')

diff --git a/src/main/java/com/juick/config/SecurityConfig.java b/src/main/java/com/juick/config/SecurityConfig.java
index b5c93906..f93e12a8 100644
--- a/src/main/java/com/juick/config/SecurityConfig.java
+++ b/src/main/java/com/juick/config/SecurityConfig.java
@@ -174,7 +174,7 @@ public class SecurityConfig {
                         .passwordParameter("password")
                         .failureUrl("/login?error=1")
                         .permitAll())
-                .csrf(csrf -> csrf.ignoringRequestMatchers("/settings/unsubscribe"))
+                .csrf(csrf -> csrf.ignoringRequestMatchers("/settings/unsubscribe", "/h2-console/**"))
                 .rememberMe(rememberMe -> rememberMe
                         .rememberMeCookieDomain(webDomain).key(rememberMeKey)
                         .rememberMeServices(hashCookieServices()))
-- 
cgit v1.2.3