From 0d6bbae9baa4531f5b5c3009fa72e691cf30fe41 Mon Sep 17 00:00:00 2001
From: Ruslan Kashapov <ruslan.kashapov@pantheon.tech>
Date: Thu, 11 Mar 2021 14:15:49 +0200
Subject: Move web security configuration to application module

Issue-ID: CPS-288
Change-Id: Ieba184c3e4727e354c19a3db31325052d15ced44
Signed-off-by: Ruslan Kashapov <ruslan.kashapov@pantheon.tech>
---
 docker-compose/application.yml | 7 +++++++
 1 file changed, 7 insertions(+)

(limited to 'docker-compose')

diff --git a/docker-compose/application.yml b/docker-compose/application.yml
index 9b841cb860..be4b688cf3 100644
--- a/docker-compose/application.yml
+++ b/docker-compose/application.yml
@@ -34,6 +34,13 @@ spring:
         change-log: classpath:changelog/changelog-master.yaml
         labels: ${LIQUIBASE_LABELS}
 
+security:
+    # comma-separated uri patterns which do not require authorization
+    permit-uri: /manage/health/**,/manage/info,/swagger-ui/**,/swagger-resources/**,/v3/api-docs
+    auth:
+        username: ${CPS_USERNAME:cpsuser}
+        password: ${CPS_PASSWORD:cpsr0cks!}
+
 # Actuator
 management:
     endpoints:
-- 
cgit 1.2.3-korg