From 2ac1b3f3c1968c7783df2cfdc9822ef90fdf8c3c Mon Sep 17 00:00:00 2001 From: Anton Romanov Date: Thu, 10 Mar 2022 17:20:35 +0400 Subject: [PATCH] #3 -- fix headers for h2 --- data/db.mv.db | Bin 57344 -> 45056 bytes .../configuration/SecurityConfiguration.java | 8 +++----- 2 files changed, 3 insertions(+), 5 deletions(-) diff --git a/data/db.mv.db b/data/db.mv.db index bd8aacfce738bf528d59c0e7f43e91b545f72221..2fc3b4de9e4cf466f101f7aa4ec2d385f69dc93c 100644 GIT binary patch delta 5216 zcmd^@-)|IE6vt<_t%a?n)Cg>WKwFBG?WD}_ncWAa0s``*P@!srlsi8bR=3+ywn&I( zDPnK?Bfrww85coJ%a)FTny63^^{{8Tu{^SwQp^-x|LvOn}KKONm z>M;3{Z*#-sh=w~592ja$N|N+catoZ9?5tm&S^a8d<~?h9y|i)7yKt@6CI1Hdw6*eI zm7`i~OYg0uENN0}Vowm}z(k?cumU~2GQGJ;7Jk&wZ;}MkyI{+eWAXqTyOOedt`4HV z)YZ4{AL!q^W4LeozTNxD|581dU&MpT!Y%ZCThA{q!M^Dgb%%T2hIg(UTA3P(CfN;w zk$kbC70=Pu1K`%_RBQi{=vI9z9#Jl)J1W0V7UagwuMgLw-=X?!CoG?Pb8qiOlG@j$ zrOksVwXaLbrw3BisXdc^PD<5GZJy+IoaAjE&zIy7cxyefE*~V5N&2BTR-JzKf_WV- zQeG=#`Qou3CcEL+Q(YT5j%7GlThg4D&U$VD4d<@0|nlP73qV9GFiLm`fDqxK617 z^KaA73or*cj&PlSGit#cu}R>u08|0sh~KOp|GU3wm1j{dWM*|=Q9sc&Z`~D-Y*AD<9*pYl z&B;zev8`gaRfA$*F8j4M#SBg{Gp1M*FG)cT-n@}ss0dvoZbi*i(nEB>t+5|*iZof} zMPh_Nqw20Qn7^wWj=JE*Z7XMWl>)nlV9ky%P8cB#;sn!mlwnR>Aq=6D19re5^!FC- z?=!5w_bBuY))t4D9T8F{HM; zG(kM~;CI``Wh-j=ALVXn?#6uYXE1zYMn^Jt?}mh>@FDNZ&@sVdcW_RNNZPm!ni{BEpiR@DK-wB<+&FRU7zGNXMS}8-HZAg3{%aGo@IUQ8 zEduw=*Y5CBC+W_%l#z{F&hF04o8P>7Gw^?WqML?UvGruQQg5uAt?5{J({41KdX2nTsoE{;s@<42D+$Gp zo65LP{*wqu1SA3y0f~S_Kq4R!kO)WwBmxoviGW1lT}NO}>i_S0A4mcu0ulj*mI^5rfOM>9}S_!!`R_Yg!9$ zm}_=(I;Mpi^?GYsF%@tWh(--tQRCs3vu;l(bxYOElIIlwC2u&jbiG|`O-Iqr{=?n{ z4~4O{@zD{JD5CP-SeO?ro>fEPXzY{?+%U!_XY0>P6YP{4+IYe zAy@F;;C;cv!TWao&eXf9Ql zLysjAmSP);SgfKYl~_zw)mU6FmF-fgoG?md-HOJ_W;A9-O-nTsC0kXrvTCSCvXqG1 zdMWxCN@W&u`N_bqAT+VbNJ*#CbJ+|kre@}|D0E?YW5FV65Ax#E0J&*7eV z40$RxI^ccf4fT6W*455R&xVxLO5GN{(=ub>AtsiPS3lRU_5Ekz$ zXIoeUC0$sLsCr}g4N$7-+kL-kP;ty4I;eTC;p#%DXL&BI{ z&gWpd>+7-Q^Q(GHSvZ$DAI~P1qw1xEVWeWw%v{unuM)YxI-;2rdEmCdz0lGZM-SRj zO&vu>2vOQkhgfwt*9ai;KEUHD>)zfuZT9?JG@qM$Qq|Pi%W;_1&m}V}scho>g#^Q4 zJ2I_HkOd9{C_fzy3YFEv$KVLELTGkzDVsZ&$E%FfeS)+Pr4dDWEnLdZW|zpSNRU6> z0>d5s`9)Y^rOyMf_XDuzP+-&fd`3ym%w8$3T#Uwz`6m|=G40Bei+Qiw?MxP!&5i(~ zZ{8}RL+KfW=)jRSdwyscUYkZi$z=pAe>jFmK~{cyYIxoBZUU77b-bKr1u+kh1S0s`(44DADez+c=t0wCmv(&hc|h?=K*}C2kYblE$DYh;h5W^(jGmi6f4LA(tYqe|C+P)*I4@#&9t3!PeCzOl zP#H$ojR>Y;Ww`L58xc%kJb2{9tAR1!QgQ#@K-K^J9^Y*6`8`jN#9PPxv%$BHKLIbD zJn>h-G2i~ZW8{@3@&g_h5%T#C9J=rC?i%x5xVRs(cmAmJ66$=n^U~I*J1=*>we@u8 zWfbbX(0L8guS4p4@Z__dS30kEUW0pIfTvr}bY9tdX6spa{d-$q2%*kbJFjkiaqCO) z!t0%H!qe}<^=~?_Bm4(me6I5?DC238<(rTR%3&|yGPXVg$yc^M2fw_WkOyvd;BA}_ z9^)6E1wtW#i+mOefSd5^O9*Z}+xafM_XW7V0`zsh&)*?5L1hRic)9Z(O2O81TfejQ zc}Qatp*&~>WP1&h2o;1n&*R^nSK;2balV%z3GLqc4C=fBMZ-(410FyuCZ+SuPy}`U zL@WbW|0>D#3efZ%rkj#UvO<$yhe9#!Uqq1YZ%I~M+Lr(VAT_ez|JL#Odc$5v&PKDn zj>`3Fy@8re3z_S7D~zmqt!Y~=yVY(Wv+Qg*P0OjRA-n3dB51{KwwzMCiu0Kp@T-Y7 z+70+yZ&*$kZ8|N}MviHWv60*kx3$ zm+Flcyx4*ZK!popsF^?!+^IM~AEqn^m95zgF&Okswn4Ab&1XTH*n%S!3c0gVe_W`uLMGyqapfI#y zHlWKKC=RXHaihbiW&%*S9~(~Dfj)se>p)A2pqI)ULJ~j^zNH^|Dh( zn_f2q3@tN)^6i=hx3A)2Ow?{bzd`j+wE;Am7uVMWw0O6yJ0d6HzBlbACJwi=+;%AV zxM0i)oJ(+REeB%?WCQCV;1^)XO|uF;6+sK8Z9(%f)3JVLuet9ayHbIM;6}U9M^L%} zd799t&^Mb7Y};yJ<^!~VXs7J9fcLP_d_FFO1~l5O2Jkg#X3nLw5)L?w z1A;#cOS|SZi69HSggZTD*KD&!8JG-C+}XUo#?^Yw!o!b_O6c8gEF)2qbO4~`WkWXf`Fgz!Lne$$RTBn(k8mO=0zvJD zS)$BKBq{54$|a-=sR-r6g)vygZmh%5YJJLue85=RyvWdfPj z81{IcN^h95Yzhk=7-END!3lB^IDoZ!)2`AP1Ed=6!wLv?B4Ry3PDUXxAertUqbvBZ z&}7`##sV2j6$H{0*a*ZmX|})$n1k5N$z>m%)+j|}96?^-VJc9l?1-QgoUF*31gBmc+DnL9IzLc##qL(`HPNMNQXT}#B*5FTyyZqhP!|c9XZh7c&>GkVc_HG zolTTPaIpF@#7+e!Gd_V~F#vN;)rK};is)bana{in6i88~06P%5 z!2kp1FT-~?%J<@=T6IcxqYjfEzz9udB!WP#vLz26x?!)Q-GNWLlF0@lZpqpNH;f8K zPgb*;1lo>8I`j-(O1UpU-@EGovVbuySR(N`6jog}3|Kr*lpQ_~QO8$=xYs;n7~;YjmI!pZ4Blus>(GlJq};(zn4U2k3>SA~aXPGa$*DRfg4LvH z|0*m_$k2xpDAyB)1Nr45<`&FFC?0Hh`h>RD8zl#EnaK#Hy#O-D0#PP33^w93m^pvax6RP=|FYtWof~hz%9| zlk+Qw-7Ci%h-_6Qa3P>e*2Zup-QX@kxh$kS$T*Rx3ao+%sLMyr{Li@G7lW_$=gT%Q zLbVmd-|6o^^UyxOa5Dz?d_MEcr|uc^!KeCzzR6%1?fZ`xKKS&He*d)Z;4j{O`|SgF zjs1&%x%1%GSZ8|6x3v$hMn^+i{*Ko90Q~&5PISxHiB1OLprFG=-JmUkxc&XEXU6N^JUxy;V#Xv zeD=93eqV4Byb0jLNX{&;JGF@qJgk@x$D$86os`-#7T3zPr#6cpS}&>d%d;02uO!nS z|HOPVclF9zBC>v^HPcQ%8NC?4`glG5l$F9j9zGlS5U!0D2ZiH*$If2)^?@WDJo|~? zzz+hGge3p5Gavcz9v^jl@J;T84_S4 z%*>_?HKrsIMil%jR4r!AW&)E?y{D7iUnWQ$G(&LFN zl%>WJ%4|HVE3+ba6M{^_qzlA?d~@=GV7=u9#LBxVggWyI6*Oj?OY z6A3k)jOwX)dRB*`0m0vz`o${tCAoehv9HPX=?#J}%Jr)zV*q#H)YNI8-|rjyQ=f0| ze}08r@BZ&Mk32F_1EWO5sg><(kyza43!HlY3EvUl-Nbh%Vj8;pD-i_0ok)!Qjg!AB z`K#T9?`!O$(^P_940=h@i%Bmfda>xmrk4sSi{{p&&;>JRXY;hM-pJMSui);-%EDoLE)t&JJf~a zk}%bW$YaK4aQq87^ri1Pts|xkd(PQ(*mIU&8}^*#H%32KhSEp#D?{m{^($&``K7qn zekIZWoMH^HX3Un^^>QDWB^At0&`s@HxjtWCi|`|KIGQkK9}qet-cwnbKBP_QrIbCS z?a+I3j%m8jH}-?azwCR&*EJC1T`5CMDbcQ!(v?bdrIG{$CW};>V2BV-iwInYe*@PM zhK&ql*a&R|tDbQNtDdDaT0KoEtVWuO)9PtL7Zb_-7~F`9{$1ExF%qX2m0q;>k((O7 z>MWgLSA$)X>}s-WiCryrwb`{oi)F=tcqGM}^irZ1YfLl7G;>TVjcM?^GNwoUCBN=h z{hB}KkB@1IF)cZ!*?!XxkF_x)Ho;viqw$1hyD3%G3`I!UR@6-yaXTuc!1+*2l~f@G zbF7$37`j)AZi!_k!0FL@mN3M82}|`TGc3h0+&5uS5VPD=6vUuVO3V~fN>nUU(JTW` ziSnOBKq4R!xMLCEi(}9Ke$!p48e#W5y_jO#rmiP;)_)$MabACkt$8)J<`w+^lV!HL zh1D`yq$#?eEwqv!w+>%?R%aoYH#>_D?bKB?G2y*vu_^lSJd7(aL{+u zQ`8JsQA@hNsOt2dQrTW~H6f2H>8=p2vMClUz&))k#?-c3*e}wrrXEKtis*c7B9E%7 ztF7HJdL$O`Tw$hWLsg{;GczJGg_)(8!pu`tVP+|&F!K~um|2P`%q+zeW}c!7Gfz>4 znWdP*OjBH8rYWv4vp1Q-%u-BY<|(N#!@^AdlL$xzBm%b&0{!~8r~j7({l8L)R?54m z|65E~(fjrP0a{a>C{5k!h*pjnf=UFR!gf#bXJ!zr|4)sdAiDTh;dj#2#gFyr;=$iM zp!<$pM;CXsa{4J#YUSi(s;KpDUn}RF#BBzm!Jx}tFo3^yUMu&k23#vo+=y1*Yc<$$ zb^Ha_s?lqS|x!Yl& zM8D5Y-yR>#51f~VjyuHA!E|T#!JMX~{(t){i6x~H0f~S_;FkgcuK#=bx2OMGp8g+K zDxh-f#;$$;XVL$rxmHBJ|0~1|x0K*tP2CUwar)IXZd%^wNW;)nLH{qmL;C-b@rQf& z6dVT5xqm!AU{Ar+_#!nHJmK?YkNU>G`h?H_=Ajdhiaw6m!}>0D;xBzCwrwnM%?1|n zfPP2K2Gk8(Ar+5s!~R28za08azhsLFrcFJucl49KCGf}SPx{h$z&+WA8DGS2`G4Sc z?l9v)m+b%#Yxi`|9kCsV9V^-nJYNVd->CEdHhk)_RfzaPfNuryI&ys>h8iEKO#}Nv z5Lwi3;taDZ)j4<44A-ub3?*s6bcTf6^X{MiprlHLDmEIX4{3|)!OrW2`nHXc<{a1cOh z26onG(kZf!{?GS*auxTfl|gL$s$$dzG|TP2ch%5kK*NL)xo6pBHJb z5|4P;#bYCw@(@o(@v#vsl~fJW-Fn1#!LVmwp~8n_v^US~R zcEr86heg~wb8u+Hy)%0UN8CGeYDmPrGvm7vaqs(sBJO=-Sj4>_iV^pGQ)mC4x|+Y? z+iT%-2j1}A{nncU&K-!qKRWo_fs*S?Zn?k8?l1d2>tODMe;ao0fapTobuQp7c$ecn z;KUuJ-=|h|Q4yWZJ!fCJhn|GbyTLv59)9mJXKC+bMebwO8;?PO15Wx*R;0d9c<)nJ zM272cff~(n;79@bB zlo)a9=BWgU>Bm!LF$Lb$I1&VVrY6ZT06b-rNPR4&sWczm13J)+o4%>W%Viw>Z~JcC ztcIwf8W6Bi+m)D#I0E4>?GceADCO-G0TcIDlyMq~fSIhgV*oY<@KoF&JW1a)lrrI0 zmcsi6+)@lUvrI^-(XLd2i~*KUv&a}=DIIvmD@CUxi9ah@cyzKJzy92Yxn%);9cC;QLSAi zn}$DsFCOkEm248@sV@v=zbYo404E+)=Y<_C51@BpK? zBJcbjm z&smirTc4zoFO~dTRPvY7y*pRJUaoEK5j6XGU6uY^Gk7QxLEv{UcUKlHk+Ds??|C#t|H(?(O6bX*KK>t#^ZH{<|1S^L|H(Hn_;%HO61O@aczTZ+Ahw%k02=@A zE~@`OA?p7p`%ZCt-`d2a@8qCU+_tU%b4x%nDnGaD5Pse)g{dBNCw*?0mVjZW=ZnYm ziKmhETLSnYqTDv|9v3Tdgh zMN7rDlwx7U2&RS`TQKS&Sh*g8C9%bp#LM~I#pP_@rtnc4@0lty!pt$hcrKSGmX3R2 zk^JK5MRH+;nmdY&5Tdl74zcQPt`UI8eSpVRhDYyedxWCxsdR(PJye4~9U|I^u>T(F zI}D)wbTlYZ|Gx}Js|;4fFqohxbF~i})Q$k6Z{8}RQvXMxxy3?pw6>kQu$szbmOvdI z{T>;VtHs)!Bx$f>JBe0E*E>>Vh@?}EcO44-2Z<%Byhu&AnE({Z*OrH R^Ys6i1qJ|f=M4bk{|_qj=7#_P diff --git a/src/main/java/ru/ulstu/configuration/SecurityConfiguration.java b/src/main/java/ru/ulstu/configuration/SecurityConfiguration.java index 8376327..ea8dc5d 100644 --- a/src/main/java/ru/ulstu/configuration/SecurityConfiguration.java +++ b/src/main/java/ru/ulstu/configuration/SecurityConfiguration.java @@ -40,14 +40,12 @@ public class SecurityConfiguration extends WebSecurityConfigurerAdapter { @Override protected void configure(HttpSecurity http) throws Exception { - http.csrf() - .disable(); + http.csrf().disable(); + http.headers().frameOptions().disable(); log.debug("Security enabled"); http.authorizeRequests() .antMatchers("/").permitAll() - .antMatchers("/login").permitAll() - .antMatchers("/index").permitAll() - .antMatchers("/news/*").permitAll() + .antMatchers("/login", "/index", "/news/*", "/h2-console/*", "/h2-console").permitAll() .antMatchers("/swagger-ui.html").hasAuthority(UserRoleConstants.ADMIN) .anyRequest().authenticated() .and()