Fix unauthenticated redirection

Thomasr · ludomikula · commit 619125523398 · 2024-07-03T13:27:59.000+02:00
diff --git a/server/api-service/lowcoder-server/src/main/java/org/lowcoder/api/framework/security/SecurityConfig.java b/server/api-service/lowcoder-server/src/main/java/org/lowcoder/api/framework/security/SecurityConfig.java
@@ -77,6 +77,11 @@ SecurityWebFilterChain securityWebFilterChain(ServerHttpSecurity http) {
             .anonymous(anonymous -> anonymous.principal(createAnonymousUser()))
             .httpBasic(Customizer.withDefaults())
             .authorizeExchange(customizer -> customizer
+                .matchers(
+                        ServerWebExchangeMatchers.pathMatchers(HttpMethod.GET, APPLICATION_URL + "/home"),
+                        ServerWebExchangeMatchers.pathMatchers(HttpMethod.GET, NewUrl.APPLICATION_URL + "/home")
+                )
+                    .authenticated()
                 .matchers(
                         ServerWebExchangeMatchers.pathMatchers(HttpMethod.POST, CUSTOM_AUTH + "/otp/send"), // sms verification
                         ServerWebExchangeMatchers.pathMatchers(HttpMethod.POST, CUSTOM_AUTH + "/phone/login"),
