FDP-94: Enable unauthorized access to actuator endpoints

Signed-off-by: Sander Verbruggen <[email protected]>
OSGP · Nov 22, 2023 · cd36f45 · cd36f45
1 parent 90b85ed
commit cd36f45
Show file tree

Hide file tree

Showing 3 changed files with 18 additions and 2 deletions.
diff --git a/...ation/src/main/java/org/gxf/soapbridge/application/configuration/SoapEndpointMapping.java b/...ation/src/main/java/org/gxf/soapbridge/application/configuration/SoapEndpointMapping.java
@@ -20,6 +20,11 @@ public SoapEndpointMapping(final SoapEndpoint soapEndpoint) {
 
   @Override
   protected Object getHandlerInternal(@NotNull final HttpServletRequest request) {
-    return soapEndpoint;
+    if (request.getServletPath().startsWith("/actuator")) {
+      // Let Spring handle this routing
+      return null;
+    } else {
+      return soapEndpoint;
+    }
   }
 }
diff --git a/application/src/main/kotlin/org/gxf/soapbridge/configuration/SecurityConfiguration.kt b/application/src/main/kotlin/org/gxf/soapbridge/configuration/SecurityConfiguration.kt
@@ -18,6 +18,7 @@ class SecurityConfiguration {
     fun filterChain(http: HttpSecurity): SecurityFilterChain =
         http.authorizeHttpRequests {
             it
+                .requestMatchers("/actuator/**").permitAll()
                 .anyRequest().authenticated()
         }.x509 {
             it

diff --git a/application/src/main/resources/application-dev.yml b/application/src/main/resources/application-dev.yml
@@ -3,7 +3,6 @@ logging:
     org:
       gxf:
         soapbridge: DEBUG
-
 spring:
   kafka:
     bootstrap-servers: localhost:9092
@@ -46,3 +45,14 @@ soap:
     port: 443
     protocol: https
   time-out: 45
+
+management:
+  server:
+    port: 8888
+  #    ssl:
+  #      enabled: false
+  #      client-auth: none
+  endpoints:
+    web:
+      exposure:
+        include: health