From 1cdc2c140e6a16c6f8b9d0abf89f94b584e4ea52 Mon Sep 17 00:00:00 2001
From: jleroy2023 <leroyjohan3@gmail.com>
Date: Wed, 16 Jul 2025 11:40:58 +0200
Subject: [PATCH] permission login

---
 src/main/java/fr/eni/demo/security/SecurityConfig.java | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/main/java/fr/eni/demo/security/SecurityConfig.java b/src/main/java/fr/eni/demo/security/SecurityConfig.java
index 5fbec1a..c0b3ec8 100644
--- a/src/main/java/fr/eni/demo/security/SecurityConfig.java
+++ b/src/main/java/fr/eni/demo/security/SecurityConfig.java
@@ -31,7 +31,7 @@ public class SecurityConfig {
         http
                 .authorizeHttpRequests(auth -> auth
                         .requestMatchers("/api/auth").permitAll()
-                        .requestMatchers("/user/**").hasAnyRole("ADMIN")
+                        .requestMatchers("/api/**").hasAnyRole("USER")
                         .anyRequest().denyAll()
                 )
                 .formLogin(Customizer.withDefaults());