update public path

src/main/kotlin/ltd/hlaeja/configuration/SecurityConfiguration.kt

@@ -2,6 +2,7 @@ package ltd.hlaeja.configuration
 
 import ltd.hlaeja.security.JwtAuthenticationConverter
 import ltd.hlaeja.security.JwtAuthenticationManager
+import ltd.hlaeja.security.authorize.publicPaths
 import org.springframework.context.annotation.Bean
 import org.springframework.context.annotation.Configuration
 import org.springframework.security.config.annotation.web.reactive.EnableWebFluxSecurity
@@ -55,6 +56,6 @@ class SecurityConfiguration {
     private fun authorizeExchange(
         authorizeExchange: AuthorizeExchangeSpec,
     ) = authorizeExchange
-        .pathMatchers("/login").permitAll()
+        .publicPaths().permitAll()
         .anyExchange().hasRole("REGISTRY")
 }

src/main/kotlin/ltd/hlaeja/security/authorize/PublicPaths.kt

@@ -0,0 +1,8 @@
+package ltd.hlaeja.security.authorize
+
+import org.springframework.security.config.web.server.ServerHttpSecurity.AuthorizeExchangeSpec
+
+fun AuthorizeExchangeSpec.publicPaths(): AuthorizeExchangeSpec.Access = pathMatchers(
+    "/actuator/**",
+    "/login",
+)