Allow /health and /info to authenticate anonymously

Then we can optionally find a non-anonymous principal if there is one. If the user is anonymous then the health result is cached up to endpoints.health.ttl (default 1000ms) to prevent a DOS attack. Fixes gh-1353
2014-10-27 13:11:13 +00:00
parent 43eda4ce5d
commit 24e71e868f
12 changed files with 191 additions and 38 deletions
--- a/spring-boot-samples/spring-boot-sample-actuator/src/main/resources/application.properties
+++ b/spring-boot-samples/spring-boot-sample-actuator/src/main/resources/application.properties
@@ -1,5 +1,5 @@
 logging.file: /tmp/logs/app.log
-logging.level.org.springframework.security: INFO
+logging.level.org.springframework.security: DEBUG
 management.address: 127.0.0.1
 #management.port: 8181
 endpoints.shutdown.enabled: true