diff --git a/src/main/java/team/wego/wegobackend/common/security/JwtAuthenticationFilter.java b/src/main/java/team/wego/wegobackend/common/security/JwtAuthenticationFilter.java index 967fd36..1eeda84 100644 --- a/src/main/java/team/wego/wegobackend/common/security/JwtAuthenticationFilter.java +++ b/src/main/java/team/wego/wegobackend/common/security/JwtAuthenticationFilter.java @@ -128,6 +128,14 @@ private boolean isPublicEndpoint(HttpServletRequest request) { return true; } + if ("GET".equals(method) && pathMatcher.match("/api/v1/groups/**", path)) { + return true; + } + + if ("GET".equals(method) && pathMatcher.match("/api/v1/group", path)) { + return true; + } + // SecurityEndpoints.PUBLIC_PATTERNS 체크 return Arrays.stream(SecurityEndpoints.PUBLIC_PATTERNS) .anyMatch(pattern -> pathMatcher.match(pattern, path)); diff --git a/src/main/java/team/wego/wegobackend/common/security/SecurityConfig.java b/src/main/java/team/wego/wegobackend/common/security/SecurityConfig.java index 9aeb7a7..af7e1b1 100644 --- a/src/main/java/team/wego/wegobackend/common/security/SecurityConfig.java +++ b/src/main/java/team/wego/wegobackend/common/security/SecurityConfig.java @@ -30,7 +30,9 @@ public SecurityFilterChain filterChain(HttpSecurity http) throws Exception { http .authorizeHttpRequests((auth) -> auth - .requestMatchers(HttpMethod.GET, "/api/v1/users/*").permitAll() + .requestMatchers(HttpMethod.GET, "/api/v1/users/*").permitAll() + .requestMatchers(HttpMethod.GET, "/api/v1/groups/**").permitAll() + .requestMatchers(HttpMethod.GET, "/api/v1/groups").permitAll() .requestMatchers(SecurityEndpoints.PUBLIC_PATTERNS).permitAll() .anyRequest().authenticated() );