in src/main/java/org/openvasp/host/config/WebSecurityConfig.java [31:41]
protected void configure(final HttpSecurity httpSecurity) throws Exception {
httpSecurity
.cors().and().csrf().disable()
.sessionManagement().sessionCreationPolicy(SessionCreationPolicy.STATELESS)
.and()
.authorizeRequests()
.antMatchers("/", "/api-doc/**").permitAll()
.antMatchers("/api/v1/**").hasRole(USER_ROLE)
.and()
.httpBasic().realmName("Open-VASP-Host-App");
}