Skip to content

CloudFoundryActuatorAutoConfiguration produces a Warning #40372

New issue

Have a question about this project? # for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “#”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? # to your account

Closed
mpstadler opened this issue Apr 16, 2024 · 1 comment
Closed

CloudFoundryActuatorAutoConfiguration produces a Warning #40372

mpstadler opened this issue Apr 16, 2024 · 1 comment
Labels
status: duplicate A duplicate of another issue

Comments

@mpstadler
Copy link

Hi

We are using spring-boot-actuator-autoconfigure:3.2.4 in a CloudFoundry environment having:
spring.main.cloud-platform=cloud_foundry

During Startup of the application we get the following warning:

 WARN [,,] 22320 --- [           main] o.s.s.c.a.web.builders.WebSecurity       : You are asking Spring Security to ignore Or [Ant [pattern='/cloudfoundryapplication/beans/**'], Ant [pattern='/cloudfoundryapplication/caches/**'], Ant [pattern='/cloudfoundryapplication/health/**'], Ant [pattern='/cloudfoundryapplication/info/**'], Ant [pattern='/cloudfoundryapplication/conditions/**'], Ant [pattern='/cloudfoundryapplication/configprops/**'], Ant [pattern='/cloudfoundryapplication/env/**'], Ant [pattern='/cloudfoundryapplication/loggers/**'], Ant [pattern='/cloudfoundryapplication/heapdump/**'], Ant [pattern='/cloudfoundryapplication/threaddump/**'], Ant [pattern='/cloudfoundryapplication/metrics/**'], Ant [pattern='/cloudfoundryapplication/scheduledtasks/**'], Ant [pattern='/cloudfoundryapplication/mappings/**'], Ant [pattern='/cloudfoundryapplication'], Ant [pattern='/cloudfoundryapplication/']]. This is not recommended -- please use permitAll via HttpSecurity#authorizeHttpRequests instead.

It seems that the problem lies in the following class that uses web.ignoring().requestMatchers(...)
org.springframework.boot.actuate.autoconfigure.cloudfoundry.servlet.CloudFoundryActuatorAutoConfiguration#IgnoredCloudFoundryPathsWebSecurityCustomizer

I guess the solution would be as you proposed it yourselves:
This is not recommended -- please use permitAll via HttpSecurity#authorizeHttpRequests instead.

Thanks for all the great work.

@mpstadler mpstadler changed the title CloudFoundryActuatorAutoConfiguration CloudFoundryActuatorAutoConfiguration produces a Warning Apr 16, 2024
@spring-projects-issues spring-projects-issues added the status: waiting-for-triage An issue we've not yet triaged label Apr 16, 2024
@mhalbritter
Copy link
Contributor

Duplicates #32622.

@mhalbritter mhalbritter closed this as not planned Won't fix, can't repro, duplicate, stale Apr 16, 2024
@mhalbritter mhalbritter added status: duplicate A duplicate of another issue and removed status: waiting-for-triage An issue we've not yet triaged labels Apr 16, 2024
# for free to join this conversation on GitHub. Already have an account? # to comment
Labels
status: duplicate A duplicate of another issue
Projects
None yet
Development

No branches or pull requests

3 participants