Securing Eureka with user/password causes recurring login popup

If I secure Eureka with a user/password as so

application.yml in Eureka Server:

 security:
   user:
     password: ${eureka.password} # Don't use a default password in a real app

And if the spring-boot-admin bootstrap.yml contains:

cloud:
  config:
    uri: http://localhost:8888/diagnostics/admin/config
    failFast: true

spring.boot.admin.discovery.management.context-path: /diagnostics/admin

eureka:
  instance:
    leaseRenewalIntervalInSeconds: 10
    statusPageUrlPath: /diagnostics/admin/info
    healthCheckUrlPath: /diagnostics/admin/health
    metadataMap:
      password: password
  client:
    enabled: true
    serviceUrl:
      defaultZone: http://user:password@localhost:8761/eureka/

Then when I bring up spring-boot-admin ui, the following prompt for user/password happens over and over. When it happens, log is Finding route for path: /api/applications/xxxx/yyy where yyy are /info|configprops/ and xxx are some kind of hash.

[joshiste]

@ravighanate did you set zuul.sensitiveHeaders to empty / no value in SBA server? So the auth header gets passed by zuul?

Also did you look at the basic-example in https://github.com/joshiste/spring-boot-admin-samples?

There will be an improvement for Boot 1.5.x to work with proteceted endpoints.

[ravighanate]

Is there any update on this issue? Using basic-auth on all client endpoints with same user/name password still doesn’t work and still keeps prompting for login. Is there any better way to handle in 1.4.X?