You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@syncope.apache.org by "Francesco Chicchiriccò (Jira)" <ji...@apache.org> on 2023/05/25 08:18:00 UTC
[jira] [Created] (SYNCOPE-1760) Align Core Spring Boot actuator endpoint security with other components
Francesco Chicchiriccò created SYNCOPE-1760:
-----------------------------------------------
Summary: Align Core Spring Boot actuator endpoint security with other components
Key: SYNCOPE-1760
URL: https://issues.apache.org/jira/browse/SYNCOPE-1760
Project: Syncope
Issue Type: Improvement
Components: core
Affects Versions: 3.0.3
Reporter: Francesco Chicchiriccò
Assignee: Francesco Chicchiriccò
Fix For: 3.0.4, 4.0.0
Currently, all Spring Boot actuator endpoints are configured to require authentication for the {{anonymous}} user, for all components but Core:
* Console
* Enduser
* SRA
* WA
For Core, instead, all Spring Boot actuator endpoints are public, but {{/info}}.
We need to align Core with the rest of components.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)