From eb2d7d3d9fc64ac74a5f6575057d1566e6657b96 Mon Sep 17 00:00:00 2001 From: Jack <jack.su@pollex.com.tw> Date: 星期三, 29 十二月 2021 19:37:01 +0800 Subject: [PATCH] [ADD] 新增預約單備註API [ADD] 更新預約單備註API [ADD] 刪除預約單備註API [ADD] 顧問查詢自己的預約單清單時帶出備註資料 --- pamapi/src/main/java/com/pollex/pam/config/SecurityConfiguration.java | 6 +++++- 1 files changed, 5 insertions(+), 1 deletions(-) diff --git a/pamapi/src/main/java/com/pollex/pam/config/SecurityConfiguration.java b/pamapi/src/main/java/com/pollex/pam/config/SecurityConfiguration.java index 9445072..45c2e6d 100644 --- a/pamapi/src/main/java/com/pollex/pam/config/SecurityConfiguration.java +++ b/pamapi/src/main/java/com/pollex/pam/config/SecurityConfiguration.java @@ -69,7 +69,7 @@ .and() .referrerPolicy(ReferrerPolicyHeaderWriter.ReferrerPolicy.STRICT_ORIGIN_WHEN_CROSS_ORIGIN) .and() - .permissionsPolicy().policy("camera=(), fullscreen=(self), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), midi=(), payment=(), sync-xhr=()") + .featurePolicy("geolocation 'none'; midi 'none'; sync-xhr 'none'; microphone 'none'; camera 'none'; magnetometer 'none'; gyroscope 'none'; fullscreen 'self'; payment 'none'") .and() .frameOptions() .deny() @@ -82,6 +82,10 @@ .antMatchers("/api/register").permitAll() .antMatchers("/api/activate").permitAll() .antMatchers("/api/testLogin/**").permitAll() + .antMatchers("/api/test/sendMsg/**").permitAll() + .antMatchers("/api/otp/**").permitAll() + .antMatchers("/api/login/validate/**").permitAll() + .antMatchers("/api/eService/authenticate").permitAll() .antMatchers("/api/account/reset-password/init").permitAll() .antMatchers("/api/account/reset-password/finish").permitAll() .antMatchers("/api/consultant/recommend").permitAll() -- Gitblit v1.8.0