coder-zheng
diff --git a/‎auth/authentication-server/src/main/java/com/springboot/cloud/auth/authentication/config/ResourceServerConfig.java
Lines changed: 12 additions & 0 deletions b/‎auth/authentication-server/src/main/java/com/springboot/cloud/auth/authentication/config/ResourceServerConfig.java
Lines changed: 12 additions & 0 deletions
diff --git a/‎auth/authentication-server/src/main/java/com/springboot/cloud/auth/authentication/config/WebServerSecurityConfig.java
Lines changed: 0 additions & 22 deletions b/‎auth/authentication-server/src/main/java/com/springboot/cloud/auth/authentication/config/WebServerSecurityConfig.java
Lines changed: 0 additions & 22 deletions
@@ -1,15 +1,18 @@
 package com.springboot.cloud.auth.authentication.config;
 
+import lombok.extern.slf4j.Slf4j;
 import org.springframework.beans.factory.annotation.Value;
 import org.springframework.context.annotation.Bean;
 import org.springframework.context.annotation.Configuration;
+import org.springframework.security.config.annotation.web.builders.HttpSecurity;
 import org.springframework.security.oauth2.config.annotation.web.configuration.EnableResourceServer;
 import org.springframework.security.oauth2.config.annotation.web.configuration.ResourceServerConfigurerAdapter;
 import org.springframework.security.oauth2.config.annotation.web.configurers.ResourceServerSecurityConfigurer;
 import org.springframework.security.oauth2.provider.token.TokenStore;
 import org.springframework.security.oauth2.provider.token.store.JwtAccessTokenConverter;
 import org.springframework.security.oauth2.provider.token.store.JwtTokenStore;
 
+@Slf4j
 @Configuration
 @EnableResourceServer
 public class ResourceServerConfig extends ResourceServerConfigurerAdapter {
@@ -24,6 +27,15 @@ public void configure(ResourceServerSecurityConfigurer resourceServerSecurityCon
                 .resourceId("WEBS");
     }
 
+    @Override
+    public void configure(HttpSecurity http) throws Exception {
+        log.debug("HttpSecurity configure method");
+        http.csrf().disable();
+        http.authorizeRequests()
+                .antMatchers("/actuator/**").permitAll()
+                .anyRequest().authenticated();
+    }
+
     @Bean
     public TokenStore tokenStore() {
         return new JwtTokenStore(accessTokenConverter());