diff --git a/src/main/java/com/abnov/infisicalbridge/config/SecurityConfig.java b/src/main/java/com/abnov/infisicalbridge/config/SecurityConfig.java new file mode 100644 index 0000000..46286ca --- /dev/null +++ b/src/main/java/com/abnov/infisicalbridge/config/SecurityConfig.java @@ -0,0 +1,22 @@ +package com.abnov.infisicalbridge.config; + +import org.springframework.context.annotation.Bean; +import org.springframework.context.annotation.Configuration; +import org.springframework.security.config.annotation.web.builders.HttpSecurity; +import org.springframework.security.web.SecurityFilterChain; + +@Configuration +public class SecurityConfig { + + @Bean + public SecurityFilterChain securityFilterChain(HttpSecurity http) throws Exception { + http + .csrf(csrf -> csrf.disable()) + .cors(cors -> cors.disable()) + .authorizeHttpRequests(auth -> auth + .requestMatchers("/webhook/**").permitAll() + .anyRequest().authenticated()); + + return http.build(); + } +}