You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@syncope.apache.org by "Francesco Chicchiriccò (Jira)" <ji...@apache.org> on 2023/05/25 08:18:00 UTC

[jira] [Created] (SYNCOPE-1760) Align Core Spring Boot actuator endpoint security with other components

Francesco Chicchiriccò created SYNCOPE-1760:
-----------------------------------------------

             Summary: Align Core Spring Boot actuator endpoint security with other components
                 Key: SYNCOPE-1760
                 URL: https://issues.apache.org/jira/browse/SYNCOPE-1760
             Project: Syncope
          Issue Type: Improvement
          Components: core
    Affects Versions: 3.0.3
            Reporter: Francesco Chicchiriccò
            Assignee: Francesco Chicchiriccò
             Fix For: 3.0.4, 4.0.0


Currently, all Spring Boot actuator endpoints are configured to require authentication for the {{anonymous}} user, for all components but Core:

* Console
* Enduser
* SRA
* WA

For Core, instead, all Spring Boot actuator endpoints are public, but {{/info}}.

We need to align Core with the rest of components.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)