spring-boot

Spring Boot

Tree: 7b8adfab41

Madhura Bhave 4ea47220e9 Match nested paths for insensitive actuators Update `ManagementWebSecurityAutoConfiguration` to match nested path for insensitive actuators. Prior to this commit, when Spring Security was on the classpath nested paths were considered sensitive (even if the actuator endpoint was not sensitive). i.e. when setting `endpoints.env.sensitive=false` `/env` could be accessed without authentication but `/env/user` could not. Fixes gh-7868 Closes gh-7881	9 years ago
..
java/sample/hypermedia/ui/secure	Match nested paths for insensitive actuators	9 years ago
resources/static	Match nested paths for insensitive actuators	9 years ago

Madhura Bhave 4ea47220e9 Match nested paths for insensitive actuators

Update `ManagementWebSecurityAutoConfiguration` to match nested path
for insensitive actuators.

Prior to this commit, when Spring Security was on the classpath
nested paths were considered sensitive (even if the actuator
endpoint was not sensitive). i.e. when setting
`endpoints.env.sensitive=false` `/env` could be accessed without
authentication but `/env/user` could not.

Fixes gh-7868
Closes gh-7881

9 years ago

java/sample/hypermedia/ui/secure

Match nested paths for insensitive actuators

9 years ago

resources/static

Match nested paths for insensitive actuators

9 years ago