joungmin/vpd-permission-poc
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

[Developer] #617 apply DDS MCP end-user authorization

Browse Source
This commit is contained in:
devmrko
2026-07-02 09:34:58 +09:00
parent fd09622c82
commit ef1331be4b
53 changed files with 2040 additions and 337 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
src/main/java/com/cloudhandson/vpdbackoffice/config/SecurityConfig.java
View File

@@ -23,12 +23,14 @@ public class SecurityConfig {
}
return http
.csrf(csrf -> csrf.ignoringRequestMatchers("/mcp/messages", "/mcp/*/messages"))
.csrf(csrf -> csrf.ignoringRequestMatchers(
"/mcp/messages", "/mcp/*/messages", "/dds/mcp/messages"))
.headers(headers -> headers.httpStrictTransportSecurity(hsts -> hsts
.includeSubDomains(true)
.maxAgeInSeconds(31_536_000)))
.authorizeHttpRequests(auth -> auth
.requestMatchers("/css/**", "/js/**", "/webjars/**").permitAll()
.requestMatchers("/css/**", "/js/**", "/webjars/**", "/dds/mcp/sse", "/dds/mcp/messages")
.permitAll()
.anyRequest().authenticated())
.httpBasic(basic -> {
})