Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

CloudFoundryActuatorAutoConfiguration produces a Warning #40372

Closed
mpstadler opened this issue Apr 16, 2024 · 1 comment
Closed

CloudFoundryActuatorAutoConfiguration produces a Warning #40372

mpstadler opened this issue Apr 16, 2024 · 1 comment
Labels
status: duplicate A duplicate of another issue

Comments

@mpstadler
Copy link

Hi

We are using spring-boot-actuator-autoconfigure:3.2.4 in a CloudFoundry environment having:
spring.main.cloud-platform=cloud_foundry

During Startup of the application we get the following warning:

 WARN [,,] 22320 --- [           main] o.s.s.c.a.web.builders.WebSecurity       : You are asking Spring Security to ignore Or [Ant [pattern='/cloudfoundryapplication/beans/**'], Ant [pattern='/cloudfoundryapplication/caches/**'], Ant [pattern='/cloudfoundryapplication/health/**'], Ant [pattern='/cloudfoundryapplication/info/**'], Ant [pattern='/cloudfoundryapplication/conditions/**'], Ant [pattern='/cloudfoundryapplication/configprops/**'], Ant [pattern='/cloudfoundryapplication/env/**'], Ant [pattern='/cloudfoundryapplication/loggers/**'], Ant [pattern='/cloudfoundryapplication/heapdump/**'], Ant [pattern='/cloudfoundryapplication/threaddump/**'], Ant [pattern='/cloudfoundryapplication/metrics/**'], Ant [pattern='/cloudfoundryapplication/scheduledtasks/**'], Ant [pattern='/cloudfoundryapplication/mappings/**'], Ant [pattern='/cloudfoundryapplication'], Ant [pattern='/cloudfoundryapplication/']]. This is not recommended -- please use permitAll via HttpSecurity#authorizeHttpRequests instead.

It seems that the problem lies in the following class that uses web.ignoring().requestMatchers(...)
org.springframework.boot.actuate.autoconfigure.cloudfoundry.servlet.CloudFoundryActuatorAutoConfiguration#IgnoredCloudFoundryPathsWebSecurityCustomizer

I guess the solution would be as you proposed it yourselves:
This is not recommended -- please use permitAll via HttpSecurity#authorizeHttpRequests instead.

Thanks for all the great work.

@mpstadler mpstadler changed the title CloudFoundryActuatorAutoConfiguration CloudFoundryActuatorAutoConfiguration produces a Warning Apr 16, 2024
@spring-projects-issues spring-projects-issues added the status: waiting-for-triage An issue we've not yet triaged label Apr 16, 2024
@mhalbritter
Copy link
Contributor

Duplicates #32622.

@mhalbritter mhalbritter closed this as not planned Won't fix, can't repro, duplicate, stale Apr 16, 2024
@mhalbritter mhalbritter added status: duplicate A duplicate of another issue and removed status: waiting-for-triage An issue we've not yet triaged labels Apr 16, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
status: duplicate A duplicate of another issue
Projects
None yet
Development

No branches or pull requests

3 participants