✨ Feat: V2 API 시큐리티 설정

Team-Shaka · Dec 8, 2023 · 4d69863 · 4d69863
1 parent b9a6239
commit 4d69863
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 1 deletion.
diff --git a/src/main/java/briefing/briefing/api/BriefingApi.java b/src/main/java/briefing/briefing/api/BriefingApi.java
@@ -40,7 +40,6 @@ public class BriefingApi {
   public CommonResponse<BriefingResponseDTO.BriefingPreviewListDTOV2> findBriefingsV2(
           @ParameterObject @ModelAttribute BriefingRequestParam.BriefingPreviewListParam params
   ) {
-
     List<Briefing> briefingList = briefingQueryService.findBriefings(params, APIVersion.V2);
     return CommonResponse.onSuccess(BriefingConverter.toBriefingPreviewListDTOV2(params.getDate(), briefingList));
   }

diff --git a/src/main/java/briefing/security/config/SecurityConfig.java b/src/main/java/briefing/security/config/SecurityConfig.java
@@ -84,9 +84,12 @@ public SecurityFilterChain filterChain(HttpSecurity http) throws Exception {
                 .authorizeHttpRequests(authorize -> {
                     authorize.requestMatchers("/v2/briefings/**").permitAll();  // 모두 접근 가능합니다.
                     authorize.requestMatchers("/briefings/**").permitAll();  // 모두 접근 가능합니다.
+                    authorize.requestMatchers("/v2/members/auth/**").permitAll();
                     authorize.requestMatchers("/members/auth/**").permitAll();
                     authorize.requestMatchers("/chattings/**").permitAll();
+                    authorize.requestMatchers(HttpMethod.DELETE, "/v2/members/{memberId}").authenticated();
                     authorize.requestMatchers(HttpMethod.DELETE, "/members/{memberId}").authenticated();
+                    authorize.requestMatchers("/v2/scraps/**").authenticated();
                     authorize.requestMatchers("/scraps/**").authenticated();
                     authorize.anyRequest().authenticated();
                 })