iSharkFly-Docs/java-tutorials
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

BAEL-315 really lock down the discovery server

Browse Source
This commit is contained in:
Tim Schimandle 2016-10-03 18:18:30 -06:00
parent d226ad2999
commit 4029a3f547
1 changed files with 2 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
spring-cloud/spring-cloud-bootstrap/discovery/src/main/java/com/baeldung/spring/cloud/bootstrap/discovery/SecurityConfig.java
View File

@ -40,6 +40,8 @@ public class SecurityConfig extends WebSecurityConfigurerAdapter {
protected void configure(HttpSecurity http) throws Exception { protected void configure(HttpSecurity http) throws Exception {
http http
.authorizeRequests() .authorizeRequests()
.antMatchers("/eureka/js/**","/eureka/css/**","/eureka/images/**","/eureka/fonts/**").authenticated()
.antMatchers("/eureka/**").hasRole("SYSTEM")
.antMatchers(HttpMethod.GET, "/").hasRole("ADMIN") .antMatchers(HttpMethod.GET, "/").hasRole("ADMIN")
.anyRequest().authenticated() .anyRequest().authenticated()
.and() .and()