Update SecurityConfig to require authentication for /api/app/** endpoints

2025-12-03 22:47:14 +01:00
parent 60593f6c11
commit ff8536b448
1 changed files with 1 additions and 1 deletions
--- a/api/src/main/java/fr/gameovergne/api/config/SecurityConfig.java
+++ b/api/src/main/java/fr/gameovergne/api/config/SecurityConfig.java
@@ -46,7 +46,7 @@ public class SecurityConfig {
                        .requestMatchers(HttpMethod.OPTIONS, "/**").permitAll() // autoriser les preflight
                        .requestMatchers("/api/auth/**").permitAll()
                        .requestMatchers("/api/users/**").authenticated()
-                        .requestMatchers("/api/app/**").permitAll()
+                        .requestMatchers("/api/app/**").authenticated()
                        .anyRequest().permitAll()
                )
                .sessionManagement(session -> session.sessionCreationPolicy(SessionCreationPolicy.STATELESS))