Commit Graph

611 Commits

Author SHA1 Message Date
Dave Syer
c144cae600 Comment out security condition pending SPR-11069 2013-11-05 14:20:51 +00:00
Phillip Webb
d784cb6a88 Apply eclipse-formatter conventions 2013-11-04 10:25:27 -08:00
Dave Syer
0c79c8913f Ensure AutoConfigurationReport is always present 2013-11-04 17:07:04 +00:00
Greg Turnquist
b63016d8fc Create a report based on Boot's autoconfiguration decisions
- Gather autoconfiguration conditional decisiions (true and false)
- Provide an actuator endpoint as one means to read the report
- Define @EnableAutConfigurationReport annotation to turn this feature on
- Tidy up autoconfig report a bit and log it if --debug=true
2013-11-04 17:07:04 +00:00
Christian Dupuis
f9caade3cc Fix test assertion 2013-11-04 17:43:06 +01:00
Christian Dupuis
6b599b8483 Add remote shell implementation based on crsh
This commit adds a new starter named spring-boot-starter-shell-crsh and auto configuration support to embed a system shell within Spring Boot applications.

The embedded shell allows clients to connect via ssh or telnet to the Boot app and execute commands. Commands can be implemented and embedded with app.

For sample usage see spring-boot-samples-actuator.
2013-11-04 17:22:02 +01:00
Dave Syer
c29d2b1be4 Remove a small race condition 2013-11-04 13:35:59 +00:00
Dave Syer
7e7d4b7d3d Only do Actuator MVC config if in a web app 2013-11-02 16:36:03 +00:00
Dave Syer
bd719c1330 Nest the @EnableWebSecurity so it can be added to a condition 2013-11-01 17:46:37 +00:00
Dave Syer
761c2dabd1 Fix build 2013-11-01 17:07:24 +00:00
Dave Syer
1bd65c7487 Make context hierarchies play nicely with actuator 2013-11-01 16:27:47 +00:00
Dave Syer
f84df423e8 Better implementation of ignores in security config 2013-11-01 15:07:02 +00:00
Dave Syer
e4d594cce5 Avoid registering endpoints if Spring MVC not available 2013-11-01 11:57:32 +00:00
Dave Syer
e53dad879d Add sample with form login 2013-11-01 11:28:53 +00:00
Dave Syer
63a2d06767 Explicitly disable security on management endpoints if requested
Previously the management endpoint filter was applied to all requests
if the user had disabled security.management.enabled, but since it
had no security applied it was letting all requests through.

The fix was to explicitly exclude the whole enclosing configuration
and carefully ignore the management endpoints in the normal security
chain.

Fixes gh-100.
2013-10-31 18:46:39 +00:00
Dave Syer
5e9b8c3340 Add missing depdendency 2013-10-31 16:49:36 +00:00
Rob Winch
77b5ad1b0b Update to Spring Security Snapshot 2013-10-31 16:45:46 +00:00
Dave Syer
0498617411 Disable whitelabel view if Thymeleaf error.html detected 2013-10-23 10:48:14 -04:00
Dave Syer
4b2cea7267 Add simple DB aware HealthIndicator 2013-10-23 08:33:47 -04:00
Dave Syer
fede0d1c98 Add profiles to /env 2013-10-16 13:42:13 -04:00
Dave Syer
cd5bc83533 Fix build some more after changes for gh-84 2013-10-10 16:47:11 -04:00
Dave Syer
228787e66d Fix build after changes for gh-84 2013-10-10 14:48:37 -04:00
ggerard
182328697d Spelling error: "everypone" 2013-10-03 17:26:30 -04:00
Dave Syer
345c0fc5a4 Add SpringApplicationBuilder
Builder for SpringApplication and ApplicationContext instances with
convenient fluent API and context hierarchy support. Simple example
of a context hierarchy:

   new SpringApplicationBuilder(ParentConfig.class)
               .child(ChildConfig.class).run(args);

Another common use case is setting default arguments, e.g.
active Spring profiles, to set up the environment for an application:

     new SpringApplicationBuilder(Application.class).profiles("server")
 		.defaultArgs("--transport=local").run(args);

If your needs are simpler, consider using the static convenience
methods in SpringApplication instead.

[#49703716] [bs-116] Parent context for some beans maybe?
2013-10-02 07:06:12 -04:00
Dave Syer
0df4156b57 Lazy initialization of management server properties 2013-10-02 06:41:21 -04:00
Dave Syer
f7fa63bcb4 Add status and error messages to /trace
[Fixes #57949108] [bs-323] Make sure /trace shows error responses
2013-10-01 14:48:07 -04:00
Dave Syer
ecc4676fb3 Tweak security example 2013-09-18 16:43:38 +01:00
lecaros
cf4f549b06 change credentials order in authentication manager example
username/password pairs were incorrect. The authentication manager has "user" and "password", so those credentials should be allowed to get the actual message.
2013-09-18 16:43:38 +01:00
checketts
7236015a4d Fix the AuthenticationManagerBuilder code snippet
Fix AuthenticationManagerBuilder code snippet to add the missing the
ObjectPostProcessor parameter for the constructor.

Issue: #45
2013-09-11 11:04:00 -07:00
Dave Syer
ba4a81510b Add response headers to Trace 2013-09-09 04:19:38 -07:00
Dave Syer
7a6131c466 Make InMemoryMetricRepository.increment() thread safe 2013-09-09 04:19:38 -07:00
Dave Syer
8467a66e84 Add security.management.enabled flag 2013-09-06 19:54:15 +01:00
Dave Syer
5f8f062545 Allow security.ignored=none to switch off ignores 2013-09-06 09:40:04 +01:00
Dave Syer
f63071d38a Allow security.ignored to be set as a list (e.g. indexed)
In particular this allows a YAML externalization as an array
as opposed to a CSV.
2013-09-05 17:15:17 -07:00
Dave Syer
1366216b7f Add X-Application-Context header to identify app 2013-09-05 17:15:16 -07:00
Dave Syer
2ba01008bb Add headers external properties for security filters 2013-09-05 17:15:16 -07:00
Dave Syer
5d7101fb5a Really disable security for app endpoints
If the user sets security.basic.enabled=false we should just
back away from the non-management endpoints completely.
Previously the Spring Security filter was still added but with
no authentication, creating complications when unexpected
headers etc. are added by Spring Security.
2013-09-05 17:15:16 -07:00
Dave Syer
38e565e920 Back to SNAPSHOT for dev 2013-09-05 17:15:15 -07:00
Dave Syer
b634b3bde6 Update to 0.5.0.M2 2013-09-05 17:15:15 -07:00
Dave Syer
9e18183dd5 Don't set deefault password if empty or unresolved 2013-09-05 17:14:12 -07:00
Dave Syer
1e0e2e7102 Switch off CSRF filter
Might need to revisit later.
2013-09-05 17:14:12 -07:00
Dave Syer
43fc107437 Fix security config
The management endpoints were still all mixed up
with the user endpoints. Fixed that and extracted
user endpoints in to conditional block so not
protected if path explicitly set to empty string.

[#53029715]
2013-09-05 17:14:11 -07:00
Dave Syer
6498f0e8b8 Add logger for default password 2013-09-05 17:14:11 -07:00
Dave Syer
621116c9b8 ManagementServerConfiguration security
Management endpoints are still secure by default if
Spring Security is present, but now the default
user details have an ADMIN role, and a random password
(which is logged at INFO level if not overridden).

To override you add management.user.password (name, role)
to external properties.

[Fixes #53029715] [bs-203]
2013-09-05 17:14:10 -07:00
Dave Syer
c582fa2067 /info endpoint should be open by default
[#53029715] [bs-203] ManagementServerConfiguration security
2013-09-05 17:14:10 -07:00
ggerard
322b5e5c2b Typo (mvn -> curl) 2013-09-05 17:14:10 -07:00
Dave Syer
4c4e013c5e Avoid NPE in error controller 2013-09-05 17:14:08 -07:00
Phillip Webb
cf655945aa Polish 2013-08-09 12:28:54 -07:00
Dave Syer
2ba1bd9dbb Fix security dependency in README 2013-08-08 16:30:14 +01:00
Dave Syer
a2fe8a0e89 Actuator README accuracy 2013-08-08 16:06:30 +01:00
Dave Syer
f645b03939 Fix pom in actuator README 2013-08-08 15:58:05 +01:00
Dave Syer
521174754e Add default /error view for HTML clients
* Add integration tests for /error view
* Add "error" @Bean as default view for HTML

Users may see side effects because now there will be
a ContentNegotiatingViewResolver by default for the
first time in a vanilla Actuator app. Should be
interesting.

[Fixes #54597932] [bs-273] Circular view reference for /error
2013-08-07 10:55:30 +01:00
Dave Syer
12f0d4d95e Rename ops package to actuate 2013-08-06 13:15:02 +01:00
Dave Syer
e967c2d551 Add exception with more helpful error message.
[#54676948] Filter registered twice
2013-08-06 13:13:59 +01:00
Phillip Webb
4e11ae1671 Documentation
Various updates to README.md files.
2013-08-05 22:36:22 -07:00
Phillip Webb
1db22aca5c Rework POM structure
Rework main build POM to be an aggregator pom that does not inherit
from any parent. Introduce new spring-boot-dependencies module to
act as a parent for both spring-boot-starter-parent and
spring-boot-parent.
2013-08-02 21:58:24 -07:00
Dave Syer
4bb5de02e7 Switch back to SNAPSHOT for dev 2013-08-02 12:00:14 +01:00
Dave Syer
68e5a7e887 Bump version to 0.5.0.M1 2013-08-02 12:00:14 +01:00
Phillip Webb
e1c6860a41 Documentation 2013-08-02 00:34:53 -07:00
Phillip Webb
c83400d265 Move conditions from boot to autoconfigure
Issue: #54393078
2013-07-31 12:58:47 -07:00
Dave Syer
5995b7727a Ops -> Actuator 2013-07-31 09:46:34 +01:00