SHIBUI-2646: MDQ fixes for trailing slashes for PAC4J config

TIER · Jan 7, 2025 · 58cb10d · 58cb10d
1 parent 6d54702
commit 58cb10d
Showing 1 changed file with 6 additions and 2 deletions.
diff --git a/pac4j-module/src/main/java/net/unicon/shibui/pac4j/Pac4jSpringSecurityConfig.java b/pac4j-module/src/main/java/net/unicon/shibui/pac4j/Pac4jSpringSecurityConfig.java
@@ -71,7 +71,9 @@ public AuditorAware<String> pac4jAuditorAware() {
     @Bean
     public SecurityFilterChain filterChain(HttpSecurity http) throws Exception {
         http.authorizeHttpRequests().requestMatchers(new AntPathRequestMatcher("/unsecured/**/*"),
-                                                     new AntPathRequestMatcher("/entities/**/*"),
+                                                     new AntPathRequestMatcher("/entities*"),
+                                                     new AntPathRequestMatcher("/entities/*"),
+                                                     new AntPathRequestMatcher("/entities/**"),
                                                      new AntPathRequestMatcher("/favicon.ico"),
                                                      new AntPathRequestMatcher("/assets/**/*.png"),
                                                      new AntPathRequestMatcher("/static/**/*"),
@@ -127,7 +129,9 @@ public WebSecurityCustomizer webSecurityCustomizer() {
         firewall.setAllowSemicolon(true);
 
         return (web) -> web.ignoring().requestMatchers(new AntPathRequestMatcher("/unsecured/**/*"),
-                                                       new AntPathRequestMatcher("/entities/**/*"),
+                                                       new AntPathRequestMatcher("/entities*"),
+                                                       new AntPathRequestMatcher("/entities/*"),
+                                                       new AntPathRequestMatcher("/entities/**"),
                                                        new AntPathRequestMatcher("/favicon.ico"),
                                                        new AntPathRequestMatcher("/assets/**/*.png"),
                                                        new AntPathRequestMatcher("/static/**/*"),