code maintenance

README.md

@@ -1,3 +1,7 @@
 Aloha, funky time!
 
+curl -i http://localhost:8080/transactions
+
+curl -i http://localhost:8080/transactions/1
+
 curl -i -X POST -H "Content-Type:application/json" -d '{"account":"http://localhost:8080/accounts/1","amount":12.3,"date":"2016-05-31T22:00:00.000+0000","description":"test","category":"http://localhost:8080/categories/1"}' http://localhost:8080/transactions 

src/main/java/de/tilman/transactions/SecurityConfiguration.java

@@ -23,9 +23,9 @@ public class SecurityConfiguration extends WebSecurityConfigurerAdapter {
 	@Override
 	protected void configure(HttpSecurity http) throws Exception {
 		// Basis-Schutz: Nur autorisierte Zugriffe (feingranulare Steuerung über Assertions)
-//		http.authorizeRequests()
+		http.authorizeRequests()
-//			.antMatchers(HttpMethod.GET, "/public/**").permitAll()
+			.antMatchers(HttpMethod.GET, "/public/**").permitAll()
-//			.anyRequest().authenticated();
+			.anyRequest().authenticated();
 		
 //		http.httpBasic(); // XXX mit HTTP Basic Auth funktioniert der Logout nicht richtig
 		http.formLogin();