diff --git a/build.gradle b/build.gradle index bc3eb5d..83966f9 100644 --- a/build.gradle +++ b/build.gradle @@ -44,6 +44,7 @@ dependencies { implementation 'org.springframework.boot:spring-boot-starter-validation' implementation 'org.springframework.boot:spring-boot-starter-web' implementation 'org.springframework.boot:spring-boot-starter-oauth2-client' // OAuth2-Client dependency + implementation 'org.springframework.boot:spring-boot-starter-actuator' testImplementation 'org.springframework.boot:spring-boot-starter-test' testImplementation 'org.springframework.security:spring-security-test' annotationProcessor 'org.springframework.boot:spring-boot-configuration-processor' diff --git a/src/main/java/com/prgrms/prolog/global/config/SecurityConfig.java b/src/main/java/com/prgrms/prolog/global/config/SecurityConfig.java index c830202..9c7f933 100644 --- a/src/main/java/com/prgrms/prolog/global/config/SecurityConfig.java +++ b/src/main/java/com/prgrms/prolog/global/config/SecurityConfig.java @@ -34,6 +34,7 @@ protected void configure(HttpSecurity http) throws Exception { http .authorizeRequests() .antMatchers("/docs/**").permitAll() + .antMatchers("/actuator/**").hasRole("USER") .anyRequest().authenticated() .and() // REST API 기반이기 때문에 사용 X diff --git a/src/main/resources/application.yml b/src/main/resources/application.yml index 154a7c6..46f82d0 100644 --- a/src/main/resources/application.yml +++ b/src/main/resources/application.yml @@ -11,4 +11,10 @@ spring: include: - db - exception - - security \ No newline at end of file + - security + +management: + endpoints: + web: + exposure: + include: '*' \ No newline at end of file