fix : Gateway에서 Spring Security 인증 체크 제거 및 MSA CORS 설정 정리

Author: hongjungwook1

gateway/src/main/java/com/joketdan/gateway/config/SecurityConfig.java

@@ -5,27 +5,24 @@
 import org.springframework.context.annotation.Configuration;
 import org.springframework.security.config.annotation.web.reactive.EnableWebFluxSecurity;
 import org.springframework.security.config.web.server.ServerHttpSecurity;
-import org.springframework.security.config.web.server.ServerHttpSecurity.FormLoginSpec;
-import org.springframework.security.config.web.server.ServerHttpSecurity.HttpBasicSpec;
 import org.springframework.security.web.server.SecurityWebFilterChain;
 import org.springframework.web.cors.reactive.CorsConfigurationSource;
 
 @Configuration
 @EnableWebFluxSecurity
 public class SecurityConfig {
 
-	@Bean
-	public SecurityWebFilterChain springSecurityFilterChain(ServerHttpSecurity http, CorsConfigurationSource corsSource) {
-		return http
-			.csrf(csrf -> csrf.disable())
-			.cors(cors -> cors.configurationSource(corsSource)) // ✅ 최신 방식
-			.formLogin(ServerHttpSecurity.FormLoginSpec::disable) // 로그인폼 끄기
-			.httpBasic(ServerHttpSecurity.HttpBasicSpec::disable) // 기본 인증도 끄기
-			.authorizeExchange(ex -> ex
-				.pathMatchers("/**","/auth/**" ,"/webjars","/swagger-ui/**", "/v3/api-docs/**").permitAll()
-				.anyExchange().authenticated()
-			)
-			.build();
-	}
+    @Bean
+    public SecurityWebFilterChain springSecurityFilterChain(ServerHttpSecurity http, CorsConfigurationSource corsSource) {
+        return http
+                .csrf(csrf -> csrf.disable())
+                .cors(cors -> cors.configurationSource(corsSource))
+                .formLogin(ServerHttpSecurity.FormLoginSpec::disable)
+                .httpBasic(ServerHttpSecurity.HttpBasicSpec::disable)
+                .authorizeExchange(ex -> ex
+                        .anyExchange().permitAll()
+                )
+                .build();
+    }
 }