fix: permit cameleer-logo-48.png without auth
Browser img tags don't send Bearer tokens, so the sidebar logo needs to be in the permitAll list. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
This commit is contained in:
@@ -45,7 +45,7 @@ public class SecurityConfig {
|
||||
.requestMatchers("/api/config").permitAll()
|
||||
.requestMatchers("/", "/index.html", "/login", "/callback",
|
||||
"/environments/**", "/license", "/admin/**").permitAll()
|
||||
.requestMatchers("/_app/**", "/favicon.ico", "/favicon.svg", "/favicon-32.png", "/favicon-192.png", "/logo.svg", "/logo-dark.svg").permitAll()
|
||||
.requestMatchers("/_app/**", "/favicon.ico", "/favicon.svg", "/favicon-32.png", "/favicon-192.png", "/cameleer-logo-48.png", "/logo.svg", "/logo-dark.svg").permitAll()
|
||||
.anyRequest().authenticated()
|
||||
)
|
||||
.oauth2ResourceServer(oauth2 -> oauth2.jwt(jwt ->
|
||||
|
||||
Reference in New Issue
Block a user