From d06a0d769a77669d306ce0ac671b5db33adedb38 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Tim=20Z=C3=B6ller?= Date: Thu, 4 Dec 2025 12:49:35 +0100 Subject: [PATCH] Nice things --- src/main/java/org/operaton/fitpub/config/SecurityConfig.java | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/src/main/java/org/operaton/fitpub/config/SecurityConfig.java b/src/main/java/org/operaton/fitpub/config/SecurityConfig.java index 26e05b5..1f827f9 100644 --- a/src/main/java/org/operaton/fitpub/config/SecurityConfig.java +++ b/src/main/java/org/operaton/fitpub/config/SecurityConfig.java @@ -60,6 +60,7 @@ public class SecurityConfig { .requestMatchers("/profile", "/profile/**", "/settings").permitAll() // Auth checked client-side .requestMatchers("/discover").permitAll() // User discovery page .requestMatchers("/notifications").permitAll() // Auth checked client-side + .requestMatchers("/analytics", "/analytics/**").permitAll() // Auth checked client-side // Public endpoints - ActivityPub federation .requestMatchers("/.well-known/**").permitAll() @@ -101,6 +102,9 @@ public class SecurityConfig { // Protected endpoints - Notifications API .requestMatchers("/api/notifications/**").authenticated() + // Protected endpoints - Analytics API + .requestMatchers("/api/analytics/**").authenticated() + // Protected endpoints - Activities API (upload, edit, delete) .requestMatchers(HttpMethod.POST, "/api/activities/upload").authenticated() .requestMatchers(HttpMethod.PUT, "/api/activities/*").authenticated()