Skip to content

Commit

Permalink
Fix typo in the 'Authorizing Requests' example
Browse files Browse the repository at this point in the history
The example request matcher listed "/resources/**", while the explanation (3) used "/static/" instead.
  • Loading branch information
aaron-to-go authored and marcusdacoregio committed Nov 22, 2023
1 parent ba85126 commit d99e985
Showing 1 changed file with 1 addition and 1 deletion.
Original file line number Diff line number Diff line change
Expand Up @@ -749,7 +749,7 @@ SecurityFilterChain web(HttpSecurity http) throws Exception {
Each rule is considered in the order they were declared.
<2> Dispatches `FORWARD` and `ERROR` are permitted to allow {spring-framework-reference-url}web.html#spring-web[Spring MVC] to render views and Spring Boot to render errors
<3> We specified multiple URL patterns that any user can access.
Specifically, any user can access a request if the URL starts with "/resources/", equals "/signup", or equals "/about".
Specifically, any user can access a request if the URL starts with "/static/", equals "/signup", or equals "/about".
<4> Any URL that starts with "/admin/" will be restricted to users who have the role "ROLE_ADMIN".
You will notice that since we are invoking the `hasRole` method we do not need to specify the "ROLE_" prefix.
<5> Any URL that starts with "/db/" requires the user to have both been granted the "db" permission as well as be a "ROLE_ADMIN".
Expand Down

0 comments on commit d99e985

Please sign in to comment.