You are right, it turned out that only this resource is currently permitted by security configuration.
We’ll add a publicly available folder by default in a future release. Now you can enable any folder by overriding the security configuration in your project. For example, if you create the following class:
import io.jmix.securityflowui.FlowuiSecurityConfiguration;
import org.springframework.context.annotation.Configuration;
import org.springframework.security.config.annotation.web.builders.HttpSecurity;
import org.springframework.security.config.annotation.web.configuration.EnableWebSecurity;
import org.springframework.security.web.SecurityFilterChain;
@EnableWebSecurity
@Configuration
public class MySecurityConfiguration extends FlowuiSecurityConfiguration {
@Override
public SecurityFilterChain securityFilterChain(HttpSecurity http) throws Exception {
http.authorizeRequests().antMatchers("/img/**").permitAll();
return super.securityFilterChain(http);
}
}
you will be able to place an image to src/main/resources/public/img folder and use it on the login view:
<image resource="img/Homer-Simpson.png" height="10em" width="5em"/>