This commit is contained in:
Stephane Nicoll 2017-09-14 19:22:37 +02:00
parent ddde3c5695
commit 5efcbad751
3 changed files with 363 additions and 314 deletions

View File

@ -891,7 +891,8 @@
"reason": "A global security auto-configuration is now provided. Provide your own WebSecurityConfigurer bean instead.", "reason": "A global security auto-configuration is now provided. Provide your own WebSecurityConfigurer bean instead.",
"level": "error" "level": "error"
} }
}, { },
{
"name": "management.security.roles", "name": "management.security.roles",
"type": "java.util.List<java.lang.String>", "type": "java.util.List<java.lang.String>",
"description": "Comma-separated list of roles that can access the management endpoint.", "description": "Comma-separated list of roles that can access the management endpoint.",
@ -899,7 +900,8 @@
"reason": "The security auto-configuration is no longer customizable. Provide your own WebSecurityConfigurer bean instead.", "reason": "The security auto-configuration is no longer customizable. Provide your own WebSecurityConfigurer bean instead.",
"level": "error" "level": "error"
} }
}, { },
{
"name": "management.security.sessions", "name": "management.security.sessions",
"description": "Session creating policy for security use (always, never, if_required,\n stateless).", "description": "Session creating policy for security use (always, never, if_required,\n stateless).",
"defaultValue": "stateless", "defaultValue": "stateless",
@ -950,7 +952,9 @@
"name": "management.shell.auth.spring.roles", "name": "management.shell.auth.spring.roles",
"type": "java.lang.String[]", "type": "java.lang.String[]",
"description": "Comma-separated list of required roles to login to the CRaSH console.", "description": "Comma-separated list of required roles to login to the CRaSH console.",
"defaultValue" : [ "ACTUATOR" ], "defaultValue": [
"ACTUATOR"
],
"deprecation": { "deprecation": {
"reason": "CRaSH support is no longer available.", "reason": "CRaSH support is no longer available.",
"level": "error" "level": "error"
@ -970,7 +974,10 @@
"name": "management.shell.command-path-patterns", "name": "management.shell.command-path-patterns",
"type": "java.lang.String[]", "type": "java.lang.String[]",
"description": "Patterns to use to look for commands.", "description": "Patterns to use to look for commands.",
"defaultValue" : [ "classpath*:/commands/**", "classpath*:/crash/commands/**" ], "defaultValue": [
"classpath*:/commands/**",
"classpath*:/crash/commands/**"
],
"deprecation": { "deprecation": {
"reason": "CRaSH support is no longer available.", "reason": "CRaSH support is no longer available.",
"level": "error" "level": "error"
@ -990,7 +997,9 @@
"name": "management.shell.config-path-patterns", "name": "management.shell.config-path-patterns",
"type": "java.lang.String[]", "type": "java.lang.String[]",
"description": "Patterns to use to look for configurations.", "description": "Patterns to use to look for configurations.",
"defaultValue" : [ "classpath*:/crash/*" ], "defaultValue": [
"classpath*:/crash/*"
],
"deprecation": { "deprecation": {
"reason": "CRaSH support is no longer available.", "reason": "CRaSH support is no longer available.",
"level": "error" "level": "error"
@ -1000,12 +1009,17 @@
"name": "management.shell.disabled-commands", "name": "management.shell.disabled-commands",
"type": "java.lang.String[]", "type": "java.lang.String[]",
"description": "Comma-separated list of commands to disable.", "description": "Comma-separated list of commands to disable.",
"defaultValue" : [ "jpa*", "jdbc*", "jndi*" ], "defaultValue": [
"jpa*",
"jdbc*",
"jndi*"
],
"deprecation": { "deprecation": {
"reason": "CRaSH support is no longer available.", "reason": "CRaSH support is no longer available.",
"level": "error" "level": "error"
} }
}, { },
{
"name": "management.shell.disabled-plugins", "name": "management.shell.disabled-plugins",
"type": "java.lang.String[]", "type": "java.lang.String[]",
"description": "Comma-separated list of plugins to disable. Certain plugins are disabled by default\n based on the environment.", "description": "Comma-separated list of plugins to disable. Certain plugins are disabled by default\n based on the environment.",
@ -1024,7 +1038,8 @@
"reason": "CRaSH support is no longer available.", "reason": "CRaSH support is no longer available.",
"level": "error" "level": "error"
} }
}, { },
{
"name": "management.shell.ssh.enabled", "name": "management.shell.ssh.enabled",
"type": "java.lang.Boolean", "type": "java.lang.Boolean",
"description": "Enable CRaSH SSH support.", "description": "Enable CRaSH SSH support.",

View File

@ -171,7 +171,9 @@
}, },
{ {
"name": "spring.elasticsearch.jest.uris", "name": "spring.elasticsearch.jest.uris",
"defaultValue": ["http://localhost:9200"] "defaultValue": [
"http://localhost:9200"
]
}, },
{ {
"name": "spring.http.encoding.enabled", "name": "spring.http.encoding.enabled",
@ -382,7 +384,11 @@
}, },
{ {
"name": "spring.security.filter.dispatcher-types", "name": "spring.security.filter.dispatcher-types",
"defaultValue": ["async", "error", "request"] "defaultValue": [
"async",
"error",
"request"
]
}, },
{ {
"name": "spring.session.hazelcast.flush-mode", "name": "spring.session.hazelcast.flush-mode",
@ -390,7 +396,11 @@
}, },
{ {
"name": "spring.session.servlet.filter-dispatcher-types", "name": "spring.session.servlet.filter-dispatcher-types",
"defaultValue": ["async", "error", "request"] "defaultValue": [
"async",
"error",
"request"
]
}, },
{ {
"name": "spring.session.redis.flush-mode", "name": "spring.session.redis.flush-mode",
@ -409,7 +419,8 @@
"replacement": "spring.flyway.baseline-description", "replacement": "spring.flyway.baseline-description",
"level": "error" "level": "error"
} }
}, { },
{
"name": "flyway.baseline-on-migrate", "name": "flyway.baseline-on-migrate",
"type": "java.lang.Boolean", "type": "java.lang.Boolean",
"deprecation": { "deprecation": {
@ -751,16 +762,20 @@
"reason": "The security auto-configuration is no longer customizable. Provide your own WebSecurityConfigurer bean instead.", "reason": "The security auto-configuration is no longer customizable. Provide your own WebSecurityConfigurer bean instead.",
"level": "error" "level": "error"
} }
}, { },
{
"name": "security.basic.path", "name": "security.basic.path",
"type": "java.lang.String[]", "type": "java.lang.String[]",
"description": "Comma-separated list of paths to secure.", "description": "Comma-separated list of paths to secure.",
"defaultValue" : [ "/**" ], "defaultValue": [
"/**"
],
"deprecation": { "deprecation": {
"reason": "The security auto-configuration is no longer customizable. Provide your own WebSecurityConfigurer bean instead.", "reason": "The security auto-configuration is no longer customizable. Provide your own WebSecurityConfigurer bean instead.",
"level": "error" "level": "error"
} }
}, { },
{
"name": "security.basic.realm", "name": "security.basic.realm",
"type": "java.lang.String", "type": "java.lang.String",
"description": "HTTP basic realm name.", "description": "HTTP basic realm name.",
@ -769,7 +784,8 @@
"reason": "The security auto-configuration is no longer customizable. Provide your own WebSecurityConfigurer bean instead.", "reason": "The security auto-configuration is no longer customizable. Provide your own WebSecurityConfigurer bean instead.",
"level": "error" "level": "error"
} }
}, { },
{
"name": "security.enable-csrf", "name": "security.enable-csrf",
"type": "java.lang.Boolean", "type": "java.lang.Boolean",
"description": "Enable Cross Site Request Forgery support.", "description": "Enable Cross Site Request Forgery support.",
@ -778,7 +794,8 @@
"reason": "The security auto-configuration is no longer customizable. Provide your own WebSecurityConfigurer bean instead.", "reason": "The security auto-configuration is no longer customizable. Provide your own WebSecurityConfigurer bean instead.",
"level": "error" "level": "error"
} }
}, { },
{
"name": "security.headers.cache", "name": "security.headers.cache",
"type": "java.lang.Boolean", "type": "java.lang.Boolean",
"description": "Enable cache control HTTP headers.", "description": "Enable cache control HTTP headers.",
@ -787,7 +804,8 @@
"reason": "The security auto-configuration is no longer customizable. Provide your own WebSecurityConfigurer bean instead.", "reason": "The security auto-configuration is no longer customizable. Provide your own WebSecurityConfigurer bean instead.",
"level": "error" "level": "error"
} }
}, { },
{
"name": "security.headers.content-security-policy", "name": "security.headers.content-security-policy",
"type": "java.lang.String", "type": "java.lang.String",
"description": "Value for content security policy header.", "description": "Value for content security policy header.",
@ -795,7 +813,8 @@
"reason": "The security auto-configuration is no longer customizable. Provide your own WebSecurityConfigurer bean instead.", "reason": "The security auto-configuration is no longer customizable. Provide your own WebSecurityConfigurer bean instead.",
"level": "error" "level": "error"
} }
}, { },
{
"name": "security.headers.content-security-policy-mode", "name": "security.headers.content-security-policy-mode",
"description": "Content security policy mode.", "description": "Content security policy mode.",
"defaultValue": "default", "defaultValue": "default",
@ -803,7 +822,8 @@
"reason": "The security auto-configuration is no longer customizable. Provide your own WebSecurityConfigurer bean instead.", "reason": "The security auto-configuration is no longer customizable. Provide your own WebSecurityConfigurer bean instead.",
"level": "error" "level": "error"
} }
}, { },
{
"name": "security.headers.content-type", "name": "security.headers.content-type",
"type": "java.lang.Boolean", "type": "java.lang.Boolean",
"description": "Enable \"X-Content-Type-Options\" header.", "description": "Enable \"X-Content-Type-Options\" header.",
@ -812,7 +832,8 @@
"reason": "The security auto-configuration is no longer customizable. Provide your own WebSecurityConfigurer bean instead.", "reason": "The security auto-configuration is no longer customizable. Provide your own WebSecurityConfigurer bean instead.",
"level": "error" "level": "error"
} }
}, { },
{
"name": "security.headers.frame", "name": "security.headers.frame",
"type": "java.lang.Boolean", "type": "java.lang.Boolean",
"description": "Enable \"X-Frame-Options\" header.", "description": "Enable \"X-Frame-Options\" header.",
@ -821,7 +842,8 @@
"reason": "The security auto-configuration is no longer customizable. Provide your own WebSecurityConfigurer bean instead.", "reason": "The security auto-configuration is no longer customizable. Provide your own WebSecurityConfigurer bean instead.",
"level": "error" "level": "error"
} }
}, { },
{
"name": "security.headers.hsts", "name": "security.headers.hsts",
"description": "HTTP Strict Transport Security (HSTS) mode (none, domain, all).", "description": "HTTP Strict Transport Security (HSTS) mode (none, domain, all).",
"defaultValue": "all", "defaultValue": "all",
@ -829,7 +851,8 @@
"reason": "The security auto-configuration is no longer customizable. Provide your own WebSecurityConfigurer bean instead.", "reason": "The security auto-configuration is no longer customizable. Provide your own WebSecurityConfigurer bean instead.",
"level": "error" "level": "error"
} }
}, { },
{
"name": "security.headers.xss", "name": "security.headers.xss",
"type": "java.lang.Boolean", "type": "java.lang.Boolean",
"description": "Enable cross site scripting (XSS) protection.", "description": "Enable cross site scripting (XSS) protection.",
@ -838,7 +861,8 @@
"reason": "The security auto-configuration is no longer customizable. Provide your own WebSecurityConfigurer bean instead.", "reason": "The security auto-configuration is no longer customizable. Provide your own WebSecurityConfigurer bean instead.",
"level": "error" "level": "error"
} }
}, { },
{
"name": "security.ignored", "name": "security.ignored",
"type": "java.util.List<java.lang.String>", "type": "java.util.List<java.lang.String>",
"description": "Comma-separated list of paths to exclude from the default secured paths.", "description": "Comma-separated list of paths to exclude from the default secured paths.",
@ -846,7 +870,8 @@
"reason": "The security auto-configuration is no longer customizable. Provide your own WebSecurityConfigurer bean instead.", "reason": "The security auto-configuration is no longer customizable. Provide your own WebSecurityConfigurer bean instead.",
"level": "error" "level": "error"
} }
}, { },
{
"name": "security.oauth2.resource.filter-order", "name": "security.oauth2.resource.filter-order",
"type": "java.lang.Integer", "type": "java.lang.Integer",
"description": "The order of the filter chain used to authenticate tokens. Default puts it after\n the actuator endpoints and before the default HTTP basic filter chain (catchall).", "description": "The order of the filter chain used to authenticate tokens. Default puts it after\n the actuator endpoints and before the default HTTP basic filter chain (catchall).",
@ -855,7 +880,8 @@
"reason": "The security auto-configuration does no longer provide several security configurations. Their ordering is now explicit in your own security configuration.", "reason": "The security auto-configuration does no longer provide several security configurations. Their ordering is now explicit in your own security configuration.",
"level": "error" "level": "error"
} }
}, { },
{
"name": "security.oauth2.sso.filter-order", "name": "security.oauth2.sso.filter-order",
"type": "java.lang.Integer", "type": "java.lang.Integer",
"description": "Filter order to apply if not providing an explicit WebSecurityConfigurerAdapter (in\n which case the order can be provided there instead).", "description": "Filter order to apply if not providing an explicit WebSecurityConfigurerAdapter (in\n which case the order can be provided there instead).",
@ -863,7 +889,8 @@
"reason": "The security auto-configuration does no longer provide several security configurations. Their ordering is now explicit in your own security configuration.", "reason": "The security auto-configuration does no longer provide several security configurations. Their ordering is now explicit in your own security configuration.",
"level": "error" "level": "error"
} }
}, { },
{
"name": "security.require-ssl", "name": "security.require-ssl",
"type": "java.lang.Boolean", "type": "java.lang.Boolean",
"description": "Enable secure channel for all requests.", "description": "Enable secure channel for all requests.",
@ -872,7 +899,8 @@
"reason": "The security auto-configuration is no longer customizable. Provide your own WebSecurityConfigurer bean instead.", "reason": "The security auto-configuration is no longer customizable. Provide your own WebSecurityConfigurer bean instead.",
"level": "error" "level": "error"
} }
}, { },
{
"name": "security.sessions", "name": "security.sessions",
"type": "org.springframework.security.config.http.SessionCreationPolicy", "type": "org.springframework.security.config.http.SessionCreationPolicy",
"description": "Session creation policy (always, never, if_required, stateless).", "description": "Session creation policy (always, never, if_required, stateless).",
@ -881,7 +909,8 @@
"reason": "The security auto-configuration is no longer customizable. Provide your own WebSecurityConfigurer bean instead.", "reason": "The security auto-configuration is no longer customizable. Provide your own WebSecurityConfigurer bean instead.",
"level": "error" "level": "error"
} }
}, { },
{
"name": "security.user.name", "name": "security.user.name",
"type": "java.lang.String", "type": "java.lang.String",
"description": "Default user name.", "description": "Default user name.",
@ -890,7 +919,8 @@
"reason": "The default user is no longer customizable. You can, for instance, define a bean of type UserDetailsService.", "reason": "The default user is no longer customizable. You can, for instance, define a bean of type UserDetailsService.",
"level": "error" "level": "error"
} }
}, { },
{
"name": "security.user.password", "name": "security.user.password",
"type": "java.lang.String", "type": "java.lang.String",
"description": "Password for the default user name.", "description": "Password for the default user name.",
@ -898,7 +928,8 @@
"reason": "The default user is no longer customizable. You can, for instance, define a bean of type UserDetailsService.", "reason": "The default user is no longer customizable. You can, for instance, define a bean of type UserDetailsService.",
"level": "error" "level": "error"
} }
}, { },
{
"name": "security.user.role", "name": "security.user.role",
"type": "java.util.List<java.lang.String>", "type": "java.util.List<java.lang.String>",
"description": "Granted roles for the default user name.", "description": "Granted roles for the default user name.",

View File

@ -162,7 +162,9 @@
"sourceType": "org.springframework.boot.SpringApplication", "sourceType": "org.springframework.boot.SpringApplication",
"description": "Display the banner when the application runs.", "description": "Display the banner when the application runs.",
"defaultValue": true, "defaultValue": true,
"deprecation": {"replacement": "spring.main.banner-mode"} "deprecation": {
"replacement": "spring.main.banner-mode"
}
}, },
{ {
"name": "spring.main.sources", "name": "spring.main.sources",
@ -182,7 +184,9 @@
"sourceType": "org.springframework.boot.SpringApplication", "sourceType": "org.springframework.boot.SpringApplication",
"description": "Run the application in a web environment (auto-detected by default).", "description": "Run the application in a web environment (auto-detected by default).",
"deprecated": true, "deprecated": true,
"deprecation": {"replacement": "spring.main.web-application-type"} "deprecation": {
"replacement": "spring.main.web-application-type"
}
}, },
{ {
"name": "spring.output.ansi.enabled", "name": "spring.output.ansi.enabled",
@ -260,7 +264,6 @@
{ {
"value": "off" "value": "off"
} }
], ],
"providers": [ "providers": [
{ {