From 9669761b1c47c83790fe000d2f8f9b1f2bf3604d Mon Sep 17 00:00:00 2001
From: Sheikah45 <Sheikah450@gmail.com>
Date: Wed, 24 Jun 2026 20:16:24 -0400
Subject: [PATCH] Allow github webhook

---
 .../com/faforever/api/config/security/WebSecurityConfig.java | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/src/main/java/com/faforever/api/config/security/WebSecurityConfig.java b/src/main/java/com/faforever/api/config/security/WebSecurityConfig.java
index b8f2cd3c6..715f15331 100644
--- a/src/main/java/com/faforever/api/config/security/WebSecurityConfig.java
+++ b/src/main/java/com/faforever/api/config/security/WebSecurityConfig.java
@@ -24,7 +24,7 @@
 public class WebSecurityConfig {
 
   @Bean
-  public SecurityFilterChain securityFilterChain(HttpSecurity http) throws Exception {
+  public SecurityFilterChain securityFilterChain(HttpSecurity http) {
     final var bearerTokenResolver = new DefaultBearerTokenResolver();
     bearerTokenResolver.setAllowUriQueryParameter(true);
 
@@ -61,7 +61,8 @@ public SecurityFilterChain securityFilterChain(HttpSecurity http) throws Excepti
         "/users/performPasswordReset",
         "/users/buildSteamPasswordResetUrl",
         "/users/requestPasswordResetViaSteam",
-        "/users/linkToSteam/**"
+        "/users/linkToSteam/**",
+        "/gitHub/webhook"
       ).permitAll();
       authorizeConfig.anyRequest().authenticated();
     });