From 39b829c3409dad8ad3bb72fc852c66e7a47106b1 Mon Sep 17 00:00:00 2001
From: David Blasby <david.blasby@geocat.net>
Date: Thu, 14 May 2026 16:10:47 -0700
Subject: [PATCH] add the anonymous filter into the oidc filters

---
 .../config-security/config-security-openidconnect.xml       | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/web/src/main/webapp/WEB-INF/config-security/config-security-openidconnect.xml b/web/src/main/webapp/WEB-INF/config-security/config-security-openidconnect.xml
index a208fb4dd930..a803856898b3 100644
--- a/web/src/main/webapp/WEB-INF/config-security/config-security-openidconnect.xml
+++ b/web/src/main/webapp/WEB-INF/config-security/config-security-openidconnect.xml
@@ -171,6 +171,11 @@
     <constructor-arg ref="geonetworkCsrfSecurityRequestMatcher" />
   </bean>
 
+  <bean id="grantViewMdAuthorityFilter" class="org.fao.geonet.security.GrantViewMdAuthorityFilter">
+    <constructor-arg ref="securityContextRepository"/>
+  </bean>
+
+
   <util:list id="openidConnectFilterChanFiltersExclusive">
 
     <ref bean="securityContextPersistenceFilter"/>
@@ -186,6 +191,7 @@
 
     <ref bean="requestCacheFilter"/>
     <ref bean="anonymousFilter"/>
+    <ref bean="grantViewMdAuthorityFilter"/>
     <ref bean="sessionMgmtFilter"/>
     <ref bean="exceptionTranslationFilter"/>
     <ref bean="filterSecurityInterceptor"/>