From 40e312add543c96274010e235249d0dbf5a7b23d Mon Sep 17 00:00:00 2001
From: jsgjsg <jsgcys0815@gmail.com>
Date: Mon, 5 Jan 2026 22:20:06 +0900
Subject: [PATCH] =?UTF-8?q?[#41]=20feat:=20securityConfig=20=ED=8C=8C?=
 =?UTF-8?q?=EC=9D=BC=20=EB=B3=80=EA=B2=BD?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 .../java/com/mobility/api/global/config/SecurityConfig.java     | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/src/main/java/com/mobility/api/global/config/SecurityConfig.java b/src/main/java/com/mobility/api/global/config/SecurityConfig.java
index 761f027..fe9bbc8 100644
--- a/src/main/java/com/mobility/api/global/config/SecurityConfig.java
+++ b/src/main/java/com/mobility/api/global/config/SecurityConfig.java
@@ -85,6 +85,8 @@ public SecurityFilterChain prodSecurityFilterChain(HttpSecurity http) throws Exc
                 .authorizeHttpRequests(authz -> authz
                         .requestMatchers("/api/auth/**").permitAll() // 로그인 API 등은 허용
                         .requestMatchers("/health/**").permitAll() // ping 등 health-check 허용
+                        .requestMatchers(SWAGGER_URLS).permitAll()
+                        .requestMatchers(WEBSOCKET_URLS).permitAll()  // WebSocket 경로 허용
                         .requestMatchers("/error").permitAll() // (에러 내용을 보기 위함)
                         .requestMatchers("/api/**").authenticated() // 나머지 API는 인증 필요
                         .anyRequest().denyAll()