diff --git a/src/main/java/ssu/eatssu/domain/auth/infrastructure/SecurityConfig.java b/src/main/java/ssu/eatssu/domain/auth/infrastructure/SecurityConfig.java index 0e08077..7ef26fc 100644 --- a/src/main/java/ssu/eatssu/domain/auth/infrastructure/SecurityConfig.java +++ b/src/main/java/ssu/eatssu/domain/auth/infrastructure/SecurityConfig.java @@ -27,6 +27,10 @@ public class SecurityConfig { "/inquiries/list" }; + private static final String[] ADMIN_PAGE_LIST = { + "/admin/**" + }; + private final JwtTokenProvider jwtTokenProvider; private final JwtAccessDeniedHandler jwtAccessDeniedHandler; private final JwtAuthenticationEntryPoint jwtAuthenticationEntryPoint; @@ -44,6 +48,7 @@ protected SecurityFilterChain filterChain(HttpSecurity http) throws Exception { .authorizeHttpRequests(authorize -> authorize .shouldFilterAllDispatcherTypes(false) .requestMatchers(AUTH_WHITELIST).permitAll() + .requestMatchers(ADMIN_PAGE_LIST).hasRole("ADMIN") .anyRequest().authenticated() .and().addFilterBefore(new JwtAuthenticationFilter(jwtTokenProvider), UsernamePasswordAuthenticationFilter.class))