spring-boot

10476 Commits

24 Branches

375 Tags

282 MiB

Tree: ec0cc0fe2d

Commit Graph

Author	SHA1	Message	Date
Andy Wilkinson	682d0f524f	Test insecure, insensitive endpoint with property that's always available The user property is only available on Unix-like platforms (due to the USER environment variable). This commit updates the test to explicitly set a specific property and then check that it's accessible via the env endpoint rather than using one that is OS-specific. See gh-7868 See gh-7881	9 years ago
Johnny Lim	acc36c076d	Polish See gh-8004	9 years ago
Madhura Bhave	4ea47220e9	Match nested paths for insensitive actuators Update `ManagementWebSecurityAutoConfiguration` to match nested path for insensitive actuators. Prior to this commit, when Spring Security was on the classpath nested paths were considered sensitive (even if the actuator endpoint was not sensitive). i.e. when setting `endpoints.env.sensitive=false` `/env` could be accessed without authentication but `/env/user` could not. Fixes gh-7868 Closes gh-7881	9 years ago

Author

SHA1

Message

Date

Andy Wilkinson

682d0f524f

Test insecure, insensitive endpoint with property that's always available

The user property is only available on Unix-like platforms (due to
the USER environment variable). This commit updates the test to
explicitly set a specific property and then check that it's accessible
via the env endpoint rather than using one that is OS-specific.

See gh-7868
See gh-7881

9 years ago

Johnny Lim

acc36c076d

Polish

See gh-8004

9 years ago

Madhura Bhave

4ea47220e9

Match nested paths for insensitive actuators

Update `ManagementWebSecurityAutoConfiguration` to match nested path
for insensitive actuators.

Prior to this commit, when Spring Security was on the classpath
nested paths were considered sensitive (even if the actuator
endpoint was not sensitive). i.e. when setting
`endpoints.env.sensitive=false` `/env` could be accessed without
authentication but `/env/user` could not.

Fixes gh-7868
Closes gh-7881

9 years ago

3 Commits (ec0cc0fe2d8f0d5948ffb4b75518dbca990dca5d)