Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Samples using the actuator without Spring Security now returns 401 (e.g. /flyway) #7637

Closed
deinspanjer opened this issue Dec 13, 2016 · 5 comments
Assignees
Milestone

Comments

@deinspanjer
Copy link

I was looking at the sample on master and tried to run it with mvn spring-boot:run then visited the url http://localhost:8080/flyway and got a blank page back. I tried several different branches, and it works in the latest 1.4.x but not in 1.5.x starting on commit 7e9ed5e where the version numbers were changed from 1.4.1.BUILD-SNAPSHOT to 1.5.0.BUILD-SNAPSHOT. Since there were no code changes in that commit itself, I'm guessing maybe some dependency changed which is what is actually breaking it?

@spring-projects-issues spring-projects-issues added the status: waiting-for-triage An issue we've not yet triaged label Dec 13, 2016
@wilkinsona
Copy link
Member

This is a result of #6889. If things stay as they are (TBD at the moment) then we ought to update the sample.

@wilkinsona wilkinsona added this to the 1.5.0 M1 milestone Dec 13, 2016
@wilkinsona wilkinsona changed the title spring-boot-sample-flyway does not work in 1.5.x or later spring-boot-sample-flyway returns 401 from /flyway as actuator endpoints are now secure by default Dec 13, 2016
@wilkinsona wilkinsona removed the status: waiting-for-triage An issue we've not yet triaged label Dec 13, 2016
@snicoll snicoll changed the title spring-boot-sample-flyway returns 401 from /flyway as actuator endpoints are now secure by default Samples using the actuator without Spring Security now returns 401 (e.g. /flyway) Dec 22, 2016
@snicoll
Copy link
Member

snicoll commented Dec 22, 2016

All samples that uses the actuator without spring security are affected. Same thing for liquibase and probably others.

@snicoll snicoll self-assigned this Dec 28, 2016
@snicoll
Copy link
Member

snicoll commented Dec 28, 2016

We should use management.security.enabled=false

@Sutonline
Copy link

@snicoll
management.security.enable=false must with spring security, right?

@snicoll
Copy link
Member

snicoll commented Apr 21, 2017

@Sutonline this issue is closed and we don't use the tracker for questions. Please join us on Gitter or ask on Stack Overflow

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

5 participants