org.springframework.boot.actuate.autoconfigure

Class ManagementWebSecurityAutoConfiguration

java.lang.Object

org.springframework.boot.actuate.autoconfigure.ManagementWebSecurityAutoConfiguration

@Configuration
 @ConditionalOnWebApplication
 @ConditionalOnClass(value={org.springframework.security.config.annotation.web.configuration.EnableWebSecurity.class,org.springframework.security.web.util.matcher.RequestMatcher.class})
 @EnableConfigurationProperties
public class ManagementWebSecurityAutoConfiguration
extends Object

Auto-configuration for security of framework endpoints. Many aspects of the behavior can be controller with ManagementServerProperties via externalized application properties (or via an bean definition of that type to set the defaults).

The framework Endpoints (used to expose application information to operations) include a sensitive configuration option which will be used as a security hint by the filter created here.

Author:

Dave Syer, Andy Wilkinson

Nested Class Summary

Nested Classes

Modifier and Type	Class and Description
protected static class	ManagementWebSecurityAutoConfiguration.ManagementSecurityPropertiesConfiguration
protected static class	ManagementWebSecurityAutoConfiguration.ManagementWebSecurityConfigurerAdapter
protected static class	ManagementWebSecurityAutoConfiguration.WebSecurityEnabler

Constructor Summary

Constructors

Constructor and Description
ManagementWebSecurityAutoConfiguration()

Method Summary

Modifier and Type	Method and Description
IgnoredRequestCustomizer	managementIgnoredRequestCustomizer(ManagementServerProperties management, org.springframework.beans.factory.ObjectProvider<ManagementContextResolver> contextResolver)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

ManagementWebSecurityAutoConfiguration

public ManagementWebSecurityAutoConfiguration()

Method Detail

managementIgnoredRequestCustomizer

@Bean
public IgnoredRequestCustomizer managementIgnoredRequestCustomizer(ManagementServerProperties management,
                                                                         org.springframework.beans.factory.ObjectProvider<ManagementContextResolver> contextResolver)