From 0175cdc65bbdf7c500a89131951db1a586b0b579 Mon Sep 17 00:00:00 2001 From: William Harrington Date: Mon, 17 Feb 2025 09:46:27 -0600 Subject: filter /logout for authenticated and not permitall. --- src/main/java/org/berzerkula/builddb/config/SecurityConfig.java | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/main/java/org/berzerkula/builddb/config/SecurityConfig.java b/src/main/java/org/berzerkula/builddb/config/SecurityConfig.java index 9e1ae1d..8d8b4b7 100644 --- a/src/main/java/org/berzerkula/builddb/config/SecurityConfig.java +++ b/src/main/java/org/berzerkula/builddb/config/SecurityConfig.java @@ -28,7 +28,7 @@ public class SecurityConfig { .requestMatchers("/pkgs/**").hasRole(BuilddbConstants.ROLE_CLIENT) .requestMatchers("/register").permitAll() .requestMatchers("/login").permitAll() - .requestMatchers("/logout").permitAll() + .requestMatchers("/logout").authenticated() .anyRequest().authenticated() ) .csrf(csrf -> csrf -- cgit v1.2.3-54-g00ecf