feat : security path permit

ShallWeProject · Feb 4, 2024 · 19267f8 · 19267f8
1 parent 17977ee
commit 19267f8
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 2 deletions.
diff --git a/src/main/java/com/shallwe/domain/reservation/presentation/ReservationController.java b/src/main/java/com/shallwe/domain/reservation/presentation/ReservationController.java
@@ -103,7 +103,7 @@ public ResponseCustom<List<ReservationIdUserRes>> getReservationWithDate(
     @Operation(summary = "해당 경험 선물에 생성된 예약 조회 ", description = "경험 ID로 검색")
     @ApiResponses(value = {
             @ApiResponse(responseCode = "200", description = "예약 정보 조회 성공", content = {
-                    @Content(mediaType = "application/json", array = @ArraySchema(schema = @Schema(implementation = ReservationResponse.class)))}),
+                    @Content(mediaType = "application/json", array = @ArraySchema(schema = @Schema(implementation = ReservationIdUserRes.class)))}),
             @ApiResponse(responseCode = "400", description = "예약 정보 조회 실패", content = {
                     @Content(mediaType = "application/json", schema = @Schema(implementation = ErrorResponse.class))}),
 

diff --git a/src/main/java/com/shallwe/global/config/security/SecurityConfig.java b/src/main/java/com/shallwe/global/config/security/SecurityConfig.java
@@ -83,7 +83,7 @@ public SecurityFilterChain filterChain(HttpSecurity http) throws Exception {
                 .authorizeHttpRequests(authorize -> authorize
                         .requestMatchers("/", "/error", "/favicon.ico", "/**/*.png", "/**/*.gif", "/**/*.svg", "/**/*.jpg", "/**/*.html", "/**/*.css", "/**/*.js")
                                 .permitAll()
-                        .requestMatchers("/management/**")
+                        .requestMatchers("/management/**","/graph/**")
                                  .permitAll()
                         .requestMatchers("/swagger", "/swagger-ui.html", "/swagger-ui/**", "/api-docs", "/api-docs/**", "/v3/api-docs/**")
                                 .permitAll()