From b428c78b184425c71a9cba4aafd794198744d3b2 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?=D0=90=D0=BB=D0=B5=D0=BA=D1=81=D0=B0=D0=BD=D0=B4=D1=80=20?= =?UTF-8?q?=D0=97=D0=B8=D0=BC=D0=B8=D0=BD?= Date: Sun, 10 May 2026 18:48:55 +0000 Subject: [PATCH] =?UTF-8?q?fix(auth):=20permitAll=20/api/v1/version=20(UI?= =?UTF-8?q?=20polling=20=D1=80=D0=B0=D0=B1=D0=BE=D1=82=D0=B0=D0=B5=D1=82?= =?UTF-8?q?=20=D0=B4=D0=BE=20login)?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- .../cloud/nstart/terravault/ordinis/auth/SecurityConfig.java | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/ordinis-auth/src/main/java/cloud/nstart/terravault/ordinis/auth/SecurityConfig.java b/ordinis-auth/src/main/java/cloud/nstart/terravault/ordinis/auth/SecurityConfig.java index 842ed4d..3e036b3 100644 --- a/ordinis-auth/src/main/java/cloud/nstart/terravault/ordinis/auth/SecurityConfig.java +++ b/ordinis-auth/src/main/java/cloud/nstart/terravault/ordinis/auth/SecurityConfig.java @@ -42,6 +42,10 @@ public class SecurityConfig { .authorizeHttpRequests(auth -> { auth.requestMatchers("/actuator/**").permitAll(); auth.requestMatchers("/error").permitAll(); + // Build-info endpoint — открыт без auth: UI polling с update-banner + // должен работать ДО login (anonymous landing → "новая версия" + // banner появится после Keycloak callback). См. VersionController. + auth.requestMatchers("/api/v1/version").permitAll(); // Swagger UI + OpenAPI spec — открыты для интеграторов (Альтум, ...). auth.requestMatchers( "/swagger-ui.html",