McPringle/fitpub
1
0
Fork 0
Code Issues 24 Pull requests 6 Projects Releases Packages Wiki Activity Actions

Nice things

Browse source
This commit is contained in:
Tim Zöller 2025-12-04 12:49:35 +01:00
parent 362680f774
commit d06a0d769a
1 changed files with 4 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

4
src/main/java/org/operaton/fitpub/config/SecurityConfig.java
View file

@ -60,6 +60,7 @@ public class SecurityConfig {
.requestMatchers("/profile", "/profile/**", "/settings").permitAll() // Auth checked client-side .requestMatchers("/profile", "/profile/**", "/settings").permitAll() // Auth checked client-side
.requestMatchers("/discover").permitAll() // User discovery page .requestMatchers("/discover").permitAll() // User discovery page
.requestMatchers("/notifications").permitAll() // Auth checked client-side .requestMatchers("/notifications").permitAll() // Auth checked client-side
.requestMatchers("/analytics", "/analytics/**").permitAll() // Auth checked client-side
// Public endpoints - ActivityPub federation // Public endpoints - ActivityPub federation
.requestMatchers("/.well-known/**").permitAll() .requestMatchers("/.well-known/**").permitAll()
@ -101,6 +102,9 @@ public class SecurityConfig {
// Protected endpoints - Notifications API // Protected endpoints - Notifications API
.requestMatchers("/api/notifications/**").authenticated() .requestMatchers("/api/notifications/**").authenticated()
// Protected endpoints - Analytics API
.requestMatchers("/api/analytics/**").authenticated()
// Protected endpoints - Activities API (upload, edit, delete) // Protected endpoints - Activities API (upload, edit, delete)
.requestMatchers(HttpMethod.POST, "/api/activities/upload").authenticated() .requestMatchers(HttpMethod.POST, "/api/activities/upload").authenticated()
.requestMatchers(HttpMethod.PUT, "/api/activities/*").authenticated() .requestMatchers(HttpMethod.PUT, "/api/activities/*").authenticated()