I have secured (basic authentication) my spring boot application with spring security. I added role MANAGEMENT for users who can use monitoring and management. I set management.security.roles=MANAGEMENT. User with this role can see only status (using health endpoint). If I set management.security.role=MANAGEMENT, everything works (user with this role see all health parameters), but this property is depricated. Am I doing something wrong? Or it is a bug? I have spring boot in version 1.4.0.RELEASE
management.security.roles doesn't work for health endpoint
787 Views Asked by grzegrzol At
1
There are 1 best solutions below
Related Questions in SPRING-BOOT
- Timing Issue with Spring Boot Annotation Configuration
- LightAdmin - Customise parsing DateTime with app timezone
- Creating distribution with repackaged spring boot jar using gradle application plugin
- Spring Boot MVC non-role based security
- Add JVM args to spring boot application
- The method and() is undefined for the type HttpSecurity
- swagger ui not working for swagger version 2
- Spring IO Platform 2.0 - Themes/Changes?
- JPA findDistinctPropertyBy magic method doesn't work as expected when using spring-boot-starter-jpa
- Spring boot check external service status on boot
- Running a specific spring batch job amongst several jobs contained withing a spring boot fat jar
- Adding security to rest api service built with Spring Boot app
- Spring Redirecting from Http to Https Breaks Rest Controller Test
- Service not starting using Spring-boot during integration tests
- Spring Boot Actuator Health Returning DOWN
Related Questions in SPRING-SECURITY
- AndroidAnnotations how to use setBearerAuth
- Show login dialog when not authenticated yet
- LDAP user attributes from CAS
- Spring security /j_spring_security_login 404 error
- Use thymeleaf template for some pages and rest for some for building gradle project
- Spring MVC + Tiles + Spring Security = The requested resource is not available
- The type javax.servlet.ServletContext and javax.servlet.ServletException cannot be resolved
- Intercepting springsecurity behavior in grails
- Basic Auth to Receive Token in Spring Security
- Spring LDAP Context.REFERRAL to follow
- Fail to locate j_spring_security_check in Spring Security
- Accessing resource with expired bearer token fails with 500 http code
- Spring security not authenticate the user
- Remove "Using default security password" on Spring Boot
- Is a SecurityContext shared between requests when using Spring Security?
Related Questions in SPRING-BOOT-ACTUATOR
- Spring-boot Actuator SSL configuration
- Groovy HTTPBuilder gets Service Unavailable for SSL endpoint
- Property value could not be read when using @RefreshScope in spring controller
- management.security.roles doesn't work for health endpoint
- Using CORS endpoints in application.properties instead of @CrossOrigin
- Spring-Boot-Actuator : Aggregation of /health endpoints cross micro-services
- Spring boot reset datasource on the fly
- Spring boot actuator with spring boot 1.5.4
- Getting following error when made a restful request using spring security "Full authentication is required to access this resource
- Spring Health Actuator: Viewing full health
- Spring Admin Console Not showing Eureka client with custom path
- Spring Boot Actuator paths not enabled by default?
- monitoring spring boot service (actuator, security enabled) using prometheus
- @RefreshScope with @ConditionalOnProperty does not work
- Spring Security (for Webflux) - Disable mTLS over HTTPS for only one endpoint (leaving the rest mTLS/SSL)
Trending Questions
- UIImageView Frame Doesn't Reflect Constraints
- Is it possible to use adb commands to click on a view by finding its ID?
- How to create a new web character symbol recognizable by html/javascript?
- Why isn't my CSS3 animation smooth in Google Chrome (but very smooth on other browsers)?
- Heap Gives Page Fault
- Connect ffmpeg to Visual Studio 2008
- Both Object- and ValueAnimator jumps when Duration is set above API LvL 24
- How to avoid default initialization of objects in std::vector?
- second argument of the command line arguments in a format other than char** argv or char* argv[]
- How to improve efficiency of algorithm which generates next lexicographic permutation?
- Navigating to the another actvity app getting crash in android
- How to read the particular message format in android and store in sqlite database?
- Resetting inventory status after order is cancelled
- Efficiently compute powers of X in SSE/AVX
- Insert into an external database using ajax and php : POST 500 (Internal Server Error)
Popular Questions
- How do I undo the most recent local commits in Git?
- How can I remove a specific item from an array in JavaScript?
- How do I delete a Git branch locally and remotely?
- Find all files containing a specific text (string) on Linux?
- How do I revert a Git repository to a previous commit?
- How do I create an HTML button that acts like a link?
- How do I check out a remote Git branch?
- How do I force "git pull" to overwrite local files?
- How do I list all files of a directory?
- How to check whether a string contains a substring in JavaScript?
- How do I redirect to another webpage?
- How can I iterate over rows in a Pandas DataFrame?
- How do I convert a String to an int in Java?
- Does Python have a string 'contains' substring method?
- How do I check if a string contains a specific word?
It seems that in 1.4.0 you need to use
management.security.role(singular) I had issues with 1.4.2 and 1.4.3 that only usemanagement.security.roles(plural).I wish I would have found some documentation about the change before running into it when updating Spring Boot from 1.4.0 to 1.4.3