Commit Graph

13 Commits

Author SHA1 Message Date
Dave Syer
9e18183dd5 Don't set deefault password if empty or unresolved 2013-09-05 17:14:12 -07:00
Dave Syer
1e0e2e7102 Switch off CSRF filter
Might need to revisit later.
2013-09-05 17:14:12 -07:00
Dave Syer
43fc107437 Fix security config
The management endpoints were still all mixed up
with the user endpoints. Fixed that and extracted
user endpoints in to conditional block so not
protected if path explicitly set to empty string.

[#53029715]
2013-09-05 17:14:11 -07:00
Dave Syer
6498f0e8b8 Add logger for default password 2013-09-05 17:14:11 -07:00
Dave Syer
621116c9b8 ManagementServerConfiguration security
Management endpoints are still secure by default if
Spring Security is present, but now the default
user details have an ADMIN role, and a random password
(which is logged at INFO level if not overridden).

To override you add management.user.password (name, role)
to external properties.

[Fixes #53029715] [bs-203]
2013-09-05 17:14:10 -07:00
Dave Syer
c582fa2067 /info endpoint should be open by default
[#53029715] [bs-203] ManagementServerConfiguration security
2013-09-05 17:14:10 -07:00
Dave Syer
4c4e013c5e Avoid NPE in error controller 2013-09-05 17:14:08 -07:00
Phillip Webb
cf655945aa Polish 2013-08-09 12:28:54 -07:00
Dave Syer
521174754e Add default /error view for HTML clients
* Add integration tests for /error view
* Add "error" @Bean as default view for HTML

Users may see side effects because now there will be
a ContentNegotiatingViewResolver by default for the
first time in a vanilla Actuator app. Should be
interesting.

[Fixes #54597932] [bs-273] Circular view reference for /error
2013-08-07 10:55:30 +01:00
Dave Syer
12f0d4d95e Rename ops package to actuate 2013-08-06 13:15:02 +01:00
Dave Syer
e967c2d551 Add exception with more helpful error message.
[#54676948] Filter registered twice
2013-08-06 13:13:59 +01:00
Phillip Webb
c83400d265 Move conditions from boot to autoconfigure
Issue: #54393078
2013-07-31 12:58:47 -07:00
Dave Syer
5995b7727a Ops -> Actuator 2013-07-31 09:46:34 +01:00