Provide EndpointRequest for configuring WebFlux-based Security
See original GitHub issueUsing Spring Boot, SpringMVC and Spring Security I can configure the security part of my Spring Boot app as follows:
...requestMatchers(EndpointRequest.to("status", "info"))...
Now, I’m migrating from SpringMVC to Spring WebFlux. I see that I’ve to use pathMatchers()
instead of requestMatchers
from Spring Security. However, EndpointRequest
is depending on HttpServletRequest
(and thus on Spring MVC).
In https://stackoverflow.com/questions/47287312/spring-security-with-webflux-how-to-migrate-requestmatchersendpointrequest-to#comment-81531115 @bclozel suggests to open an issue.
Issue Analytics
- State:
- Created 6 years ago
- Comments:7 (7 by maintainers)
Top Results From Across the Web
EndpointRequest (Spring Boot 3.0.0 API)
Returns a matcher that includes all actuator endpoints . It also includes the links endpoint which is present at the base path of...
Read more >Spring Boot 2.0 disable default security - Stack Overflow
According to the new updates in Spring 2.0, if Spring Security is on the classpath, Spring Boot will add @EnableWebSecurity.
Read more >[Solved]-Spring Boot 2.0 disable default security-Springboot
Technically security is still configured, but wide open. @Configuration @ConditionalOnProperty(prefix = "security", value = "disabled", havingValue = "true") ...
Read more >How to Enable All Endpoints in Spring Boot Actuator - Baeldung
class because this will let us apply our own security configuration to the /actuator. Over in our configuration class, let's configure a couple ......
Read more >Securing Spring Boot Actuator Endpoints with Spring Security
Here we will be using inMemoryAuthentication to provide authentication. To configure in hibernate with DB authentication check Spring Boot ...
Read more >
Top Related Medium Post
No results found
Top Related StackOverflow Question
No results found
Troubleshoot Live Code
Lightrun enables developers to add logs, metrics and snapshots to live code - no restarts or redeploys required.
Start Free
Top Related Reddit Thread
No results found
Top Related Hackernoon Post
No results found
Top Related Tweet
No results found
Top Related Dev.to Post
No results found
Top Related Hashnode Post
No results found
I don’t think it can be dangerous so to speak. Even if the name is the same, one gives you a
RequestMatcher
and the reactive on would provide aServerWebExchangeMatcher
.Looks like SPR-16298 has been marked as resolved.