From 3a33324b2abb869a70a64ce2faf30ae60af6882e Mon Sep 17 00:00:00 2001 From: hsiegeln <37154749+hsiegeln@users.noreply.github.com> Date: Mon, 6 Apr 2026 22:32:16 +0200 Subject: [PATCH] fix: permit cameleer-logo-48.png without auth Browser img tags don't send Bearer tokens, so the sidebar logo needs to be in the permitAll list. Co-Authored-By: Claude Opus 4.6 (1M context) --- .../java/net/siegeln/cameleer/saas/config/SecurityConfig.java | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/main/java/net/siegeln/cameleer/saas/config/SecurityConfig.java b/src/main/java/net/siegeln/cameleer/saas/config/SecurityConfig.java index 6c1f76c..426235f 100644 --- a/src/main/java/net/siegeln/cameleer/saas/config/SecurityConfig.java +++ b/src/main/java/net/siegeln/cameleer/saas/config/SecurityConfig.java @@ -45,7 +45,7 @@ public class SecurityConfig { .requestMatchers("/api/config").permitAll() .requestMatchers("/", "/index.html", "/login", "/callback", "/environments/**", "/license", "/admin/**").permitAll() - .requestMatchers("/_app/**", "/favicon.ico", "/favicon.svg", "/favicon-32.png", "/favicon-192.png", "/logo.svg", "/logo-dark.svg").permitAll() + .requestMatchers("/_app/**", "/favicon.ico", "/favicon.svg", "/favicon-32.png", "/favicon-192.png", "/cameleer-logo-48.png", "/logo.svg", "/logo-dark.svg").permitAll() .anyRequest().authenticated() ) .oauth2ResourceServer(oauth2 -> oauth2.jwt(jwt ->