[SHIRO-741] Matching of / (root) is broken

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 1.5.0
• Fix Version/s: 1.5.1
• Component/s: Web
• Assignee: Unassigned
• Reporter: Emond Papegaaij
• Created: 04/Feb/20 16:40
• Updated: 15/Feb/20 07:20
• Resolved: 15/Feb/20 07:20

Description

Since SHIRO-682 it is no longer possible match the root of your application with /** . A request at / is transformed into an empty URI and no longer matches /**. This makes it impossible to secure your entire application and provide a whitelist for allowed urls, like this:

[urls]
/rest/v1/openapi.* = noSessionCreation,anon
/rest/v1/info = noSessionCreation,anon

/** = noSessionCreation,oauth2,oauth,secured

So far, I've found no way to match the root in 1.5.

Issue Links

• is fixed by: SHIRO-742 fix throw exception when request uri is /