graphql

src/main/java/com/jh/boot/security/JhSecurityConfig.java

@@ -32,6 +32,8 @@ public class JhSecurityConfig extends WebSecurityConfigurerAdapter {
         HttpSecurity cfg = http
 	        .authorizeRequests()
 	        	.antMatchers("/auth/**").permitAll()
+	        	.antMatchers("/graphiql").permitAll()
+	        	.antMatchers("/graphql").permitAll()
 	        	.anyRequest().authenticated()
 	        .and()
 	        .logout()