Package springboot.bg.harisauto.common.config.monitoring

Class ActuatorSecurityConfig

java.lang.Object

springboot.bg.harisauto.common.config.monitoring.ActuatorSecurityConfig

@Configuration
public class ActuatorSecurityConfig
extends Object

ActuatorSecurityConfig.java - Security for the management endpoints.

The endpoints are served on management.server.port (9090), separately from the public site on 8080, and are open on that port so Prometheus can scrape without carrying credentials. That is only safe because the port is meant to stay internal - it must be firewalled and never published. If it has to be reachable from an untrusted network, replace the permitAll below with authentication.

Author:

Kristian Popov

Constructor Summary

Constructors

Constructor	Description
ActuatorSecurityConfig()

Method Summary

Modifier and Type	Method	Description
org.springframework.security.web.SecurityFilterChain	actuatorSecurityFilterChain(org.springframework.security.config.annotation.web.builders.HttpSecurity http)	Filter chain for the management port.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Details

ActuatorSecurityConfig

public ActuatorSecurityConfig()

Method Details

actuatorSecurityFilterChain

@Bean
@Order(0)
public org.springframework.security.web.SecurityFilterChain actuatorSecurityFilterChain(org.springframework.security.config.annotation.web.builders.HttpSecurity http)
                                                                                 throws Exception

Filter chain for the management port.

Throws:

Exception