|
|
@@ -146,6 +146,7 @@ public class WebSecurityConfig extends WebSecurityConfigurerAdapter {
|
|
|
.antMatchers("/onOff/**").permitAll()
|
|
|
.antMatchers("/metaBonusScene/**").permitAll()
|
|
|
.antMatchers("/metaPlayerWear/**").permitAll()
|
|
|
+ .antMatchers("/userHold/top/*").permitAll()
|
|
|
// all other requests need to be authenticated
|
|
|
.anyRequest().authenticated().and()
|
|
|
// make sure we use stateless session; session won't be used to
|