Merge pull request #63 from SWM-Flash/hotfix/FLASH-259-member-role

모든 역할 권한 막히는 문제 해결
SWM-Flash · Sep 11, 2024 · 6f5f072 · 6f5f072
2 parents e0295e1 + 3ddae8e
commit 6f5f072
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/src/main/java/com/first/flash/global/config/SecurityConfig.java b/src/main/java/com/first/flash/global/config/SecurityConfig.java
@@ -48,9 +48,9 @@ public SecurityFilterChain filterChain(final HttpSecurity http) throws Exception
                    .authorizeHttpRequests(authorize -> authorize
                        .requestMatchers(AUTH_WHITELIST).permitAll()
                        .requestMatchers("/admin/**").hasRole("ADMIN")
-                       .requestMatchers(HttpMethod.GET, "/**").hasRole("WEB")
+                       .requestMatchers(HttpMethod.GET, "/**").hasAnyRole("ADMIN", "USER", "WEB")
                        .requestMatchers("/**").hasAnyRole("ADMIN", "USER")
-                       .anyRequest().denyAll()
+                       .anyRequest().authenticated()
                    )
                    .addFilterBefore(new JwtAuthFilter(tokenManager, userDetailsService),
                        UsernamePasswordAuthenticationFilter.class)