From b003f2e28e44b9f6cd99031ae7ae214db8d4ef2d Mon Sep 17 00:00:00 2001 From: jae-2024 Date: Thu, 22 Jan 2026 13:32:55 +0900 Subject: [PATCH] =?UTF-8?q?[#1]=20Setting:=20H2=20Console=20=EC=A0=91?= =?UTF-8?q?=EA=B7=BC=20=EB=B6=88=EA=B0=80=20=EB=AC=B8=EC=A0=9C=20=ED=95=B4?= =?UTF-8?q?=EA=B2=B0?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- .../java/Mua/Mua_backend/global/config/SecurityConfig.java | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/src/main/java/Mua/Mua_backend/global/config/SecurityConfig.java b/src/main/java/Mua/Mua_backend/global/config/SecurityConfig.java index e137d0a..9268985 100644 --- a/src/main/java/Mua/Mua_backend/global/config/SecurityConfig.java +++ b/src/main/java/Mua/Mua_backend/global/config/SecurityConfig.java @@ -34,7 +34,7 @@ public SecurityFilterChain securityFilterChain(HttpSecurity http) throws Excepti .sessionManagement(session -> session.sessionCreationPolicy(SessionCreationPolicy.STATELESS)) .authorizeHttpRequests(auth -> auth .requestMatchers("/", "/login/**", "/oauth2/**", "/login/oauth2/**", - "/v3/api-docs/**", "/swagger-ui/**", "/swagger-ui.html").permitAll() + "/v3/api-docs/**", "/swagger-ui/**", "/swagger-ui.html", "/h2-console/**").permitAll() .requestMatchers("/admin/**").hasRole("ADMIN") .anyRequest().authenticated() ) @@ -42,6 +42,9 @@ public SecurityFilterChain securityFilterChain(HttpSecurity http) throws Excepti .exceptionHandling(exception -> exception .authenticationEntryPoint((req, res, ex) -> res.sendError(HttpServletResponse.SC_UNAUTHORIZED)) .accessDeniedHandler((req, res, ex) -> res.sendError(HttpServletResponse.SC_FORBIDDEN)) + ) + .headers(headers -> + headers.frameOptions(frame -> frame.disable()) ); return http.build();