diff --git a/src/main/java/com/ffii/tsms/config/security/SecurityConfig.java b/src/main/java/com/ffii/tsms/config/security/SecurityConfig.java
index 2732b26..0a0fb9e 100644
--- a/src/main/java/com/ffii/tsms/config/security/SecurityConfig.java
+++ b/src/main/java/com/ffii/tsms/config/security/SecurityConfig.java
@@ -32,10 +32,13 @@ public class SecurityConfig {
     public static final String LOGIN_URL = "/login";
     public static final String LDAP_LOGIN_URL = "/ldap-login";
 
+    public static final String INVOICE = "/invoices/pdf";
+
     public static final String[] URL_WHITELIST = {
             INDEX_URL,
             LOGIN_URL,
-            LDAP_LOGIN_URL
+            LDAP_LOGIN_URL,
+            INVOICE,
     };
 
     @Lazy