diff --git a/src/main/java/mops/gruppen2/security/SecurityConfig.java b/src/main/java/mops/gruppen2/security/SecurityConfig.java index 75946f1..e3299e7 100644 --- a/src/main/java/mops/gruppen2/security/SecurityConfig.java +++ b/src/main/java/mops/gruppen2/security/SecurityConfig.java @@ -61,12 +61,17 @@ class SecurityConfig extends KeycloakWebSecurityConfigurerAdapter { .hasRole("monitoring") .and() .authorizeRequests() - .antMatchers("h2-console/**") + .antMatchers("/h2-console/**") .permitAll() .anyRequest() .permitAll(); + + http.csrf().disable(); + http.headers().frameOptions().disable(); } + + /** * Declaring this class enables us to use the Spring specific * {@link org.springframework.security.access.annotation.Secured} annotation