From d3f6829ffbc695f1e4c42895b7966181471a3c1a Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?dhji=28=EC=A7=80=EB=8C=80=ED=95=9C=29?= <dhji@palnet.co.kr>
Date: Wed, 13 Jul 2022 18:04:43 +0900
Subject: [PATCH] =?UTF-8?q?swagger=20=EC=B6=94=EA=B0=80?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 pom.xml                                          |  8 ++++++++
 .../com/palnet/biz/config/WebSecurityConfig.java | 16 +++++++++++++++-
 2 files changed, 23 insertions(+), 1 deletion(-)

diff --git a/pom.xml b/pom.xml
index 6d96c87..07c27cc 100644
--- a/pom.xml
+++ b/pom.xml
@@ -148,6 +148,14 @@
 			<groupId>org.springframework.boot</groupId>
 			<artifactId>spring-boot-starter-amqp</artifactId>
 		</dependency>
+
+		<!-- Swagger -->
+		<dependency>
+			<groupId>io.springfox</groupId>
+			<artifactId>springfox-boot-starter</artifactId>
+			<version>3.0.0</version>
+		</dependency>
+
 	</dependencies>
 
 	<build>
diff --git a/src/main/java/com/palnet/biz/config/WebSecurityConfig.java b/src/main/java/com/palnet/biz/config/WebSecurityConfig.java
index 76b0244..4a306f9 100644
--- a/src/main/java/com/palnet/biz/config/WebSecurityConfig.java
+++ b/src/main/java/com/palnet/biz/config/WebSecurityConfig.java
@@ -35,7 +35,20 @@ public class WebSecurityConfig extends WebSecurityConfigurerAdapter {
 	private JwtRequestFilter jwtRequestFilter;
 
 	
-	private final String[] PERMITTED_URL = {"/api/acnt/**"};
+	private final String[] PERMITTED_URL = {
+			"/api/acnt/**",
+			/* swagger v2 */
+			"/v2/api-docs",
+			"/swagger-resources",
+			"/swagger-resources/**",
+			"/configuration/ui",
+			"/configuration/security",
+			"/swagger-ui.html",
+			"/webjars/**",
+			/* swagger v3 */
+			"/v3/api-docs/**",
+			"/swagger-ui/**"
+	};
 	
 	@Autowired
 	public void configureGlobal(AuthenticationManagerBuilder auth) throws Exception {
@@ -64,6 +77,7 @@ public class WebSecurityConfig extends WebSecurityConfigurerAdapter {
 				.authorizeRequests()
 				.antMatchers(HttpMethod.OPTIONS,"/api/**").permitAll()
 				.antMatchers(HttpMethod.GET,"/ping").permitAll()
+				.antMatchers("/swagger-ui/**").permitAll()
 				.antMatchers(PERMITTED_URL).permitAll()
 				// all other requests need to be authenticated
 				.anyRequest().authenticated().and()