Merge pull request 'fix(security): 인증 에러 401 응답 + permitAll 패턴 수정' (#9 ) from develop into main

Reviewed-on: #9
fix(security): permitAll 패턴에서 /api/auth/me 제외
2026-02-14 22:06:45 +09:00 · 2026-02-14 22:01:17 +09:00
--- a/src/main/java/com/gcsc/guide/config/SecurityConfig.java
+++ b/src/main/java/com/gcsc/guide/config/SecurityConfig.java
@ -41,7 +41,8 @@ public class SecurityConfig {
                session.sessionCreationPolicy(SessionCreationPolicy.STATELESS))
            .authorizeHttpRequests(auth -> auth
                .requestMatchers(
-                    "/api/auth/**",
+                    "/api/auth/google",
+                    "/api/auth/logout",
                    "/api/health",
                    "/actuator/health",
                    "/h2-console/**",
작성자	SHA1	메시지	날짜
htlee	30f0b28460	Merge pull request 'fix(security): 인증 에러 401 응답 + permitAll 패턴 수정' (#9 ) from develop into main All checks were successful Build and Deploy API / build-and-deploy (push) Successful in 17s Details Reviewed-on: #9	2026-02-14 22:06:45 +09:00
htlee	8e780413ce	fix(security): permitAll 패턴에서 /api/auth/me 제외 /api/auth/** 와일드카드가 /api/auth/me까지 공개하여 인증 없이 접근 시 NPE(500) 발생. /api/auth/google과 /api/auth/logout만 공개하도록 수정. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>	2026-02-14 22:01:17 +09:00