exclude websocket paths from spring security (#1523)

steve-community · Aug 15, 2024 · ab6ffc2 · ab6ffc2
1 parent 7b1e5a3
commit ab6ffc2
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/src/main/java/de/rwth/idsg/steve/config/SecurityConfiguration.java b/src/main/java/de/rwth/idsg/steve/config/SecurityConfiguration.java
@@ -99,6 +99,7 @@ public SecurityFilterChain securityFilterChain(HttpSecurity http) throws Excepti
                     .requestMatchers(
                         "/static/**",
                         CONFIG.getCxfMapping() + "/**",
+                        WebSocketConfiguration.PATH_INFIX + "**",
                         "/WEB-INF/views/**" // https://github.com/spring-projects/spring-security/issues/13285#issuecomment-1579097065
                     ).permitAll()
                     .requestMatchers(prefix + "/**").hasRole("ADMIN")