fix: permit cameleer-logo-48.png without auth
Browser img tags don't send Bearer tokens, so the sidebar logo needs to be in the permitAll list. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
This commit is contained in:
@@ -45,7 +45,7 @@ public class SecurityConfig {
|
|||||||
.requestMatchers("/api/config").permitAll()
|
.requestMatchers("/api/config").permitAll()
|
||||||
.requestMatchers("/", "/index.html", "/login", "/callback",
|
.requestMatchers("/", "/index.html", "/login", "/callback",
|
||||||
"/environments/**", "/license", "/admin/**").permitAll()
|
"/environments/**", "/license", "/admin/**").permitAll()
|
||||||
.requestMatchers("/_app/**", "/favicon.ico", "/favicon.svg", "/favicon-32.png", "/favicon-192.png", "/logo.svg", "/logo-dark.svg").permitAll()
|
.requestMatchers("/_app/**", "/favicon.ico", "/favicon.svg", "/favicon-32.png", "/favicon-192.png", "/cameleer-logo-48.png", "/logo.svg", "/logo-dark.svg").permitAll()
|
||||||
.anyRequest().authenticated()
|
.anyRequest().authenticated()
|
||||||
)
|
)
|
||||||
.oauth2ResourceServer(oauth2 -> oauth2.jwt(jwt ->
|
.oauth2ResourceServer(oauth2 -> oauth2.jwt(jwt ->
|
||||||
|
|||||||
Reference in New Issue
Block a user