disable csrf + headers.frameoptions, permit /h2-console/**

src/main/java/mops/gruppen2/security/SecurityConfig.java

@@ -61,12 +61,17 @@ class SecurityConfig extends KeycloakWebSecurityConfigurerAdapter {
                 .hasRole("monitoring")
                 .and()
                 .authorizeRequests()
-                .antMatchers("h2-console/**")
+                .antMatchers("/h2-console/**")
                 .permitAll()
                 .anyRequest()
                 .permitAll();
+
+        http.csrf().disable();
+        http.headers().frameOptions().disable();
     }
 
+
+
     /**
      * Declaring this class enables us to use the Spring specific
      * {@link org.springframework.security.access.annotation.Secured} annotation