risadmin_prod/authsec_testspring
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix(security,upload): permit /FileUpload/** to resolve 403 and increase multipart size to 500MB for video uploads

Browse Source
This commit is contained in:
Azmat-7860
2026-11-09 07:50:09 +05:30
parent 2f6283b0a7
commit 50e15c48eb
2 changed files with 4 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files
backend/src/main/java/com/realnet/config/SecurityConfig.java
+2 -2
View File
@@ -114,7 +114,7 @@ public class SecurityConfig extends WebSecurityConfigurerAdapter {
web.ignoring().antMatchers("/", "/resources/**", "/static/**", "/public/**", "/webui/**", "/h2-console/**", web.ignoring().antMatchers("/", "/resources/**", "/static/**", "/public/**", "/webui/**", "/h2-console/**",
"/configuration/**", "/swagger-ui/**", "/swagger-resources/**", "/webjars/**", "/api-docs", "/configuration/**", "/swagger-ui/**", "/swagger-resources/**", "/webjars/**", "/api-docs",
"/api-docs/**", "/v2/api-docs/**", "/*.html", "/**/*.html", "/**/*.css", "/**/*.js", "/**/*.png", "/api-docs/**", "/v2/api-docs/**", "/*.html", "/**/*.html", "/**/*.css", "/**/*.js", "/**/*.png",
"/**/*.jpg", "/**/*.gif", "/**/*.svg", "/**/*.ico", "/**/*.ttf", "/**/*.woff", "/**/*.otf", "/FileUpload/files/**", "/FileUpload/view/**"); "/**/*.jpg", "/**/*.gif", "/**/*.svg", "/**/*.ico", "/**/*.ttf", "/**/*.woff", "/**/*.otf", "/FileUpload/**");
} }
// } // }
@@ -125,7 +125,7 @@ public class SecurityConfig extends WebSecurityConfigurerAdapter {
// Add CORS Filter //http.cors().and().csrf().disable(). // Add CORS Filter //http.cors().and().csrf().disable().
.addFilterBefore(new CorsFilter(), ChannelProcessingFilter.class) .addFilterBefore(new CorsFilter(), ChannelProcessingFilter.class)
// adding backend/token for single container by Azmat 27-08 // adding backend/token for single container by Azmat 27-08
.authorizeRequests(requests -> requests.antMatchers("/token/**", "/backend/token/**", "/**/backend/token/**", "/FileUpload/files/**", "/FileUpload/view/**").permitAll().antMatchers("/log2/**") .authorizeRequests(requests -> requests.antMatchers("/token/**", "/backend/token/**", "/**/backend/token/**", "/FileUpload/**").permitAll().antMatchers("/log2/**")
.permitAll().antMatchers("/api/**").permitAll() .permitAll().antMatchers("/api/**").permitAll()
// .antMatchers("/SqlworkbenchSqlcont/**").hasRole("ADMIN") // .antMatchers("/SqlworkbenchSqlcont/**").hasRole("ADMIN")
.anyRequest().authenticated()) .anyRequest().authenticated())
backend/src/main/resources/application.properties
+2 -2
View File
@@ -62,8 +62,8 @@ spring.mail.properties.mail.smtp.socketFactory.fallback = false
#******* MULTIPART RESOLVER #******* MULTIPART RESOLVER
spring.servlet.multipart.enabled=true spring.servlet.multipart.enabled=true
spring.servlet.multipart.max-file-size=100MB spring.servlet.multipart.max-file-size=500MB
spring.servlet.multipart.max-request-size=100MB spring.servlet.multipart.max-request-size=500MB
#***************OAUTH2 SOCIAL LOGIN ********* #***************OAUTH2 SOCIAL LOGIN *********
# Social login provider props # Social login provider props