Fix bug with registration

ORCID · Feb 17, 2025 · 19afd28 · 19afd28
1 parent 46d2e2c
commit 19afd28
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 4 deletions.
diff --git a/...main/java/org/orcid/frontend/spring/session/redis/OrcidRedisIndexedSessionRepository.java b/...main/java/org/orcid/frontend/spring/session/redis/OrcidRedisIndexedSessionRepository.java
@@ -59,7 +59,7 @@ public class OrcidRedisIndexedSessionRepository implements FindByIndexNameSessio
             "/assets/vectors/orcid.logo.icon.svg", "/config.json", "/delegators/delegators-and-me.json", "/fundings/fundingDetails.json", "/fundings/fundingGroups.json", "/inbox/notifications.json",
             "/inbox/totalCount.json", "/inbox/unreadCount.json", "/my-orcid/externalIdentifiers.json", "/my-orcid/keywordsForms.json", "/my-orcid/otherNamesForms.json", "/my-orcid/websitesForms.json",
             "/ng-cli-ws", "/not-found", "/notifications/frequencies/view", "/orgs/disambiguated/FUNDREF", "/orgs/disambiguated/GRID", "/orgs/disambiguated/LEI", "/orgs/disambiguated/RINGGOLD",
-            "/orgs/disambiguated/ROR", "/peer-reviews/peer-review.json", "/peer-reviews/peer-reviews-by-group-id.json", "/peer-reviews/peer-reviews-minimized.json", "/qr-code.png",
+            "/orgs/disambiguated/ROR", "/peer-reviews/peer-review.json", "/peer-reviews/peer-reviews-by-group-id.json", "/peer-reviews/peer-reviews-minimized.json", "/qr-code.png", "/register.json",
             "/research-resources/researchResource.json", "/research-resources/researchResourcePage.json", "/works/getWorkInfo.json", "/works/groupingSuggestions.json", "/works/idTypes.json", "/works/work.json",
             "/works/worksExtendedPage.json");
     private final List<String> urisToSkipAlways = List.of("/oauth/custom/register/validatePassword.json");

diff --git a/orcid-web/src/main/resources/orcid-frontend-security.xml b/orcid-web/src/main/resources/orcid-frontend-security.xml
@@ -147,11 +147,9 @@
 	<sec:http pattern="/sendReactivation\.json" security="none" create-session="stateless" />
 	<sec:http request-matcher="regex" pattern="/orgs/disambiguated/(.+)\?(.+)?" security="none" create-session="stateless" />
 
-	<!-- Registration endpoints -->
-	<sec:http pattern="/register.json(\?.*)?" security="none" create-session="stateless" />
+	<!-- Endpoints used during registration -->
 	<sec:http pattern="/email-domain/find-category(\?.*)?" security="none" create-session="stateless" />
 	<sec:http pattern="/email-domain/find-org(\?.*)?" security="none" create-session="stateless" />
-	<sec:http pattern="/registerConfirm\.json(\?.*)?" security="none" create-session="stateless" />
 
 	<!-- Public Record page endpoints -->
 	<sec:http request-matcher="regex" pattern="/(\d{4}-){3,}\d{3}[\dX](\?.*)?" security="none" create-session="stateless" />
@@ -314,6 +312,10 @@
 		<sec:custom-filter position="CORS_FILTER" ref="corsFilterWeb" />
 		<sec:custom-filter position="SWITCH_USER_FILTER" ref="switchUserProcessingFilter" />
 
+		<sec:intercept-url pattern="/register.json(\?.*)?"
+			access="IS_AUTHENTICATED_ANONYMOUSLY" />
+		<sec:intercept-url pattern="/registerConfirm\.json(\?.*)?"
+			access="IS_AUTHENTICATED_ANONYMOUSLY"/>
 		<sec:intercept-url pattern="/notifications/frequencies/[^\/\?#:]*(\?.*)?"
 			access="IS_AUTHENTICATED_ANONYMOUSLY" />
 		<sec:intercept-url pattern="/notifications/frequencies/[^\/\?#:]*/email-frequencies.json(\?.*)?"