forked from Hithomelabs/CFTunnels
hitanshu310
b9c39ad990
- Upgrade ActuatorSecurityConfig to @Order(Ordered.HIGHEST_PRECEDENCE) at class level to ensure filter chain is evaluated before auto-configured management security - Replace string-based securityMatcher with EndpointRequest.toAnyEndpoint() for proper Spring Boot actuator endpoint matching - Add belt-and-suspenders permitAll() for /actuator/health and /actuator/info in SecuirtyConfig so health endpoints are accessible even if filter chain ordering fails - Root cause: SecuirtyConfig catch-all (no securityMatcher) was intercepting actuator requests on the separate management port (management.server.port=8081) and redirecting to OIDC login before ActuatorSecurityConfig filter chain could apply |
||
|---|---|---|
| .. | ||
| Config | ||
| Controllers | ||
| Entity | ||
| Exceptions | ||
| Headers | ||
| Models | ||
| Repositories | ||
| Services | ||
| CfTunnelsApplication.java | ||