Skip to content

Commit 6e21b15

Browse files
committed
Allow unrestricted access to the logout endpoint
Added "/logout" to the list of permitted endpoints in SecurityConfig. This ensures that users can log out without requiring authentication.
1 parent 3b0a5cc commit 6e21b15

File tree

1 file changed

+2
-1
lines changed
  • pic-sure-auth-services/src/main/java/edu/harvard/hms/dbmi/avillach/auth/config

1 file changed

+2
-1
lines changed

pic-sure-auth-services/src/main/java/edu/harvard/hms/dbmi/avillach/auth/config/SecurityConfig.java

+2-1
Original file line numberDiff line numberDiff line change
@@ -60,7 +60,8 @@ public SecurityFilterChain securityFilterChain(HttpSecurity http) throws Excepti
6060
"/swagger.json",
6161
"/user/me/queryTemplate",
6262
"/user/me/queryTemplate/**",
63-
"/open/validate"
63+
"/open/validate",
64+
"/logout"
6465
).permitAll()
6566
.anyRequest().authenticated()
6667
)

0 commit comments

Comments
 (0)