Security: - Change permitAll() to denyAll() for unlisted routes - Add @PreAuthorize to membership endpoints - Add ownership check in requestMembership - Use AccessDeniedException instead of SecurityException Error Handling: - Add proper exception mapping for IllegalArgumentException (400) - Add proper exception mapping for IllegalStateException (409) - Add proper exception mapping for AccessDeniedException (403) - Remove internal error messages from generic exception handler Tests: - Update MembershipServiceTest for new method signature - Update MeteringPointServiceTest for AccessDeniedException - All 37 tests passing |
||
|---|---|---|
| .. | ||
| src | ||
| http-client.private.env.json | ||
| iam.http | ||
| pom.xml | ||