Update SecurityConfig.java

Add "/metadata" to authExceptions so that you don't need a bearer token to get a CapabilityStatement.
CMSgov · Aug 27, 2024 · c16573f · c16573f
1 parent 18f6f82
commit c16573f
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/api/src/main/java/gov/cms/ab2d/api/security/SecurityConfig.java b/api/src/main/java/gov/cms/ab2d/api/security/SecurityConfig.java
@@ -47,7 +47,8 @@ public class SecurityConfig extends WebSecurityConfigurerAdapter {
 
     private final String[] authExceptions = new String[]{"/swagger-ui/**", "/configuration/**",
             "/swagger-resources/**", "/v3/api-docs/**", "/webjars/**",
-            AKAMAI_TEST_OBJECT, "/favicon.ico", "/error", HEALTH_ENDPOINT, STATUS_ENDPOINT};
+            AKAMAI_TEST_OBJECT, "/favicon.ico", "/error", HEALTH_ENDPOINT, STATUS_ENDPOINT,
+            "/metadata"};
 
     @Override
     protected void configure(HttpSecurity security) throws Exception {