From d8bcd1756df6bae0fc6b794ea4bf10a4e8b7e541 Mon Sep 17 00:00:00 2001
From: Ruslan Kashapov <ruslan.kashapov@pantheon.tech>
Date: Thu, 11 Mar 2021 14:15:49 +0200
Subject: Move web security configuration to application module

Issue-ID: CPS-288
Change-Id: Id244cde9ae9c87c27b69ed5a6a51772a4aef62fd
Signed-off-by: Ruslan Kashapov <ruslan.kashapov@pantheon.tech>
---
 docker-compose/application.yml | 7 +++++++
 1 file changed, 7 insertions(+)

(limited to 'docker-compose')

diff --git a/docker-compose/application.yml b/docker-compose/application.yml
index 9b841cb860..be4b688cf3 100644
--- a/docker-compose/application.yml
+++ b/docker-compose/application.yml
@@ -34,6 +34,13 @@ spring:
         change-log: classpath:changelog/changelog-master.yaml
         labels: ${LIQUIBASE_LABELS}
 
+security:
+    # comma-separated uri patterns which do not require authorization
+    permit-uri: /manage/health/**,/manage/info,/swagger-ui/**,/swagger-resources/**,/v3/api-docs
+    auth:
+        username: ${CPS_USERNAME:cpsuser}
+        password: ${CPS_PASSWORD:cpsr0cks!}
+
 # Actuator
 management:
     endpoints:
-- 
cgit 1.2.3-korg