Nice things

This commit is contained in:
Tim Zöller 2025-12-04 12:49:35 +01:00
parent 362680f774
commit d06a0d769a

View file

@ -60,6 +60,7 @@ public class SecurityConfig {
.requestMatchers("/profile", "/profile/**", "/settings").permitAll() // Auth checked client-side
.requestMatchers("/discover").permitAll() // User discovery page
.requestMatchers("/notifications").permitAll() // Auth checked client-side
.requestMatchers("/analytics", "/analytics/**").permitAll() // Auth checked client-side
// Public endpoints - ActivityPub federation
.requestMatchers("/.well-known/**").permitAll()
@ -101,6 +102,9 @@ public class SecurityConfig {
// Protected endpoints - Notifications API
.requestMatchers("/api/notifications/**").authenticated()
// Protected endpoints - Analytics API
.requestMatchers("/api/analytics/**").authenticated()
// Protected endpoints - Activities API (upload, edit, delete)
.requestMatchers(HttpMethod.POST, "/api/activities/upload").authenticated()
.requestMatchers(HttpMethod.PUT, "/api/activities/*").authenticated()