diff --git a/src/main/java/org/edgegallery/website/config/ClientWebSecurityConfigurer.java b/src/main/java/org/edgegallery/website/config/ClientWebSecurityConfigurer.java
index ab9565f91e9dd78bbcef1aa37481f1d92e2667ee..ffa7aed84b9cbc1a44dcc7642659df7b2038fce1 100644
--- a/src/main/java/org/edgegallery/website/config/ClientWebSecurityConfigurer.java
+++ b/src/main/java/org/edgegallery/website/config/ClientWebSecurityConfigurer.java
@@ -79,7 +79,7 @@ public class ClientWebSecurityConfigurer extends WebSecurityConfigurerAdapter {
         http.headers().frameOptions().disable();
         http.authorizeRequests().antMatchers("/login", "/auth/logout").permitAll()
             .antMatchers(HttpMethod.GET, "/health")
-            .permitAll()
+            .permitAll().antMatchers("/webssh").permitAll()
             .anyRequest()
             .authenticated().and()
             .addFilterBefore(oauth2ClientAuthenticationProcessingFilter(), BasicAuthenticationFilter.class).logout()