security: Fix authorization on contextPath

Signed-off-by: Shashank Verma <[email protected]>
CC-MNNIT · Sep 24, 2023 · a1f0fc1 · a1f0fc1
1 parent d9f5bae
commit a1f0fc1
Show file tree

Hide file tree

Showing 2 changed files with 1 addition and 1 deletion.
diff --git a/src/main/kotlin/com/mnnit/moticlubs/web/security/SecurityConfig.kt b/src/main/kotlin/com/mnnit/moticlubs/web/security/SecurityConfig.kt
@@ -111,7 +111,7 @@ class SecurityConfig(
                         .map { "$contextPath$it" }
                         .any { reqPath.startsWith(it) } -> Mono.empty()
 
-                    reqPath.startsWith("/$BASE_PATH") -> if (validSession) {
+                    reqPath.startsWith("$contextPath/$BASE_PATH") -> if (validSession) {
                         Mono.empty()
                     } else {
                         Mono.error(UnauthorizedException("Missing firebase auth token"))

diff --git a/src/main/resources/secrets.yml.gpg b/src/main/resources/secrets.yml.gpg