From 388a34837fd6fbce3aecb66af82fbf6fb140ff94 Mon Sep 17 00:00:00 2001
From: Chuyaoyuan <chuyaoyuan@gmail.com>
Date: Thu, 30 Apr 2026 18:53:06 +0800
Subject: [PATCH] update

---
 .../com/yaoyuan/jiscuss/config/WebSecurityConfig.java     | 3 ++-
 .../jiscuss/controller/api/RestUserController.java        | 3 ---
 src/main/resources/application-h2.yml                     | 8 +++++---
 .../resources/db/migration/V3__reset_seed_passwords.sql   | 7 +++++++
 4 files changed, 14 insertions(+), 7 deletions(-)
 create mode 100644 src/main/resources/db/migration/V3__reset_seed_passwords.sql

diff --git a/src/main/java/com/yaoyuan/jiscuss/config/WebSecurityConfig.java b/src/main/java/com/yaoyuan/jiscuss/config/WebSecurityConfig.java
index e297f6a..7451b47 100644
--- a/src/main/java/com/yaoyuan/jiscuss/config/WebSecurityConfig.java
+++ b/src/main/java/com/yaoyuan/jiscuss/config/WebSecurityConfig.java
@@ -98,7 +98,8 @@ public class WebSecurityConfig {
         http.authorizeHttpRequests(auth -> {
             // Publicly accessible
             auth.requestMatchers(
-                    "/login/**", "/initUserData",
+                "/login/**", "/register", "/registerDo", "/initUserData",
+                    "/", "/main", "/index", "/getdiscussionsbyid",
                     // SpringDoc OpenAPI UI and spec endpoint (developer tools, no sensitive data)
                     "/swagger-ui/**", "/swagger-ui.html", "/v3/api-docs/**"
             ).permitAll();
diff --git a/src/main/java/com/yaoyuan/jiscuss/controller/api/RestUserController.java b/src/main/java/com/yaoyuan/jiscuss/controller/api/RestUserController.java
index 3e71c19..6e91968 100644
--- a/src/main/java/com/yaoyuan/jiscuss/controller/api/RestUserController.java
+++ b/src/main/java/com/yaoyuan/jiscuss/controller/api/RestUserController.java
@@ -73,6 +73,3 @@ public class RestUserController {
         return usersService.getAllList();
     }
 }
-
-
-}
diff --git a/src/main/resources/application-h2.yml b/src/main/resources/application-h2.yml
index 96c1efc..a2339a9 100644
--- a/src/main/resources/application-h2.yml
+++ b/src/main/resources/application-h2.yml
@@ -5,9 +5,10 @@
 spring:
   jpa:
     show-sql: true
-    # Flyway owns DDL; Hibernate only validates existing schema
+    # Flyway owns DDL. Disable Hibernate validation in H2 because H2 reports
+    # some MySQL-compatible legacy column types differently from MySQL/Hibernate.
     hibernate:
-      ddl-auto: validate
+      ddl-auto: none
     # H2 uses the same SQL dialect as MySQL in MySQL compatibility mode
 
   # H2 console — enabled in dev ONLY.
@@ -22,7 +23,8 @@ spring:
         web-allow-others: false
 
   datasource:
-    url: jdbc:h2:~/testjiscuss;MODE=MySQL;NON_KEYWORDS=VALUE
+    # H2 2.x reserves USER/VALUE; keep them usable for the legacy schema names.
+    url: jdbc:h2:~/testjiscuss;MODE=MySQL;NON_KEYWORDS=VALUE,USER
     username: sa
     password:
     driver-class-name: org.h2.Driver
diff --git a/src/main/resources/db/migration/V3__reset_seed_passwords.sql b/src/main/resources/db/migration/V3__reset_seed_passwords.sql
new file mode 100644
index 0000000..80c584a
--- /dev/null
+++ b/src/main/resources/db/migration/V3__reset_seed_passwords.sql
@@ -0,0 +1,7 @@
+-- Reset development seed account passwords to a known BCrypt value.
+-- Plaintext password for both seeded accounts: 123456
+-- Do not use these credentials in production.
+
+UPDATE user
+SET password = '$2a$10$R4prDK/CfI0Hjrcz5dS8cOHClOIHIHlk8SoGmVY1iGWYSPxBGo7nm'
+WHERE username IN ('admin', 'test');
\ No newline at end of file