| | |
|---|
| | | .headers() |
|---|
| | | .contentSecurityPolicy(jHipsterProperties.getSecurity().getContentSecurityPolicy()) |
|---|
| | | .and() |
|---|
| | | .referrerPolicy(ReferrerPolicyHeaderWriter.ReferrerPolicy.STRICT_ORIGIN_WHEN_CROSS_ORIGIN) |
|---|
| | | .and() |
|---|
| | | .permissionsPolicy().policy("camera=(), fullscreen=(self), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), midi=(), payment=(), sync-xhr=()") |
|---|
| | | .and() |
|---|
| | | .frameOptions() |
|---|
| | |
|---|
| | | .antMatchers("/api/activate").permitAll() |
|---|
| | | .antMatchers("/api/account/reset-password/init").permitAll() |
|---|
| | | .antMatchers("/api/account/reset-password/finish").permitAll() |
|---|
| | | .antMatchers("/api/consultant/recommend").permitAll() |
|---|
| | | .antMatchers("/api/consultant/detail").permitAll() |
|---|
| | | .antMatchers("/api/admin/**").hasAuthority(AuthoritiesConstants.ADMIN) |
|---|
| | | .antMatchers("/api/**").authenticated() |
|---|
| | | .antMatchers("/websocket/**").authenticated() |
|---|
