Problem with Spring Security
Hello, I would be grateful for help
I do the logic that when users were registered immediately and in the keycloak also
were created, so here is the problem encountered that the method /api/v1/users/user, to which I explicitly indicated that permitAll() still requires authorisation, please tell me how to be, thank you in advance.
Here I made another pure get method to test whether permitAll() was applied at all and everything works fine.
11 Replies
⌛ This post has been reserved for your question.
Hey @Хьёка! Please useTIP: Narrow down your issue to simple and precise questions to maximize the chance that others will reply in here./closeor theClose Postbutton above when your problem is solved. Please remember to follow the help guidelines. This post will be automatically marked as dormant after 300 minutes of inactivity.
do you have something like context path set in the app config
💤 Post marked as dormant
This post has been inactive for over 300 minutes, thus, it has been archived.
If your question was not answered yet, feel free to re-open this post or create a new one.
In case your post is not getting any attention, you can try to use /help ping.
Warning: abusing this will result in moderative actions taken against you.No, I don't have that
and whats your controller
for users/user
This is controller and services
do you have keycloak set up in security config
i solved this problem
In the single chain, I had the resource server (JWT) enabled and CSRF disabled. For an ‘anonymous’ POST, this is a classic 403. In the public chain, we disabled CSRF, so POST /api/v1/users/user started to work.
Thanks for help
If you are finished with your post, please close it.
If you are not, please ignore this message.
Note that you will not be able to send further messages here after this post have been closed but you will be able to create new posts.
oh
nice
💤 Post marked as dormant
This post has been inactive for over 300 minutes, thus, it has been archived.
If your question was not answered yet, feel free to re-open this post or create a new one.
In case your post is not getting any attention, you can try to use /help ping.
Warning: abusing this will result in moderative actions taken against you.