Commit Graph

83 Commits

Author SHA1 Message Date
Dave Syer bd26b28aa5 Extract actuator security into separate classes
So spring-security + a web app is secure by default
(you don't need the actuator).
2013-11-21 16:47:29 +00:00
Christian Dupuis f3a225f35f Polish and rework default authentication method if a Spring Security AuthenticationManager is available
In case a Spring Security AuthenticationManager is found in the app context the auto configuration will change default shell authentication method to auth against Spring Security. In addition shell access will get protected by the specific role configured in SecurityProperties.Management.

Certainly this can be overridden by providing shell.auth and shell.auth.spring.roles.
2013-11-20 17:15:45 +01:00
Christian Dupuis 43c0c932e6 Ensure telnet connector gets installed if available on the class path 2013-11-20 17:15:45 +01:00
Christian Dupuis 2e926601f2 Polish 2013-11-18 20:59:25 +01:00
Christian Dupuis dba8c01035 Polish 2013-11-18 20:09:58 +01:00
Christian Dupuis e16e23230c Clarify default authentication settings for shell access 2013-11-18 17:48:21 +01:00
Christian Dupuis 41cbbeba79 Re-Introduce authentication specific properties 2013-11-18 17:42:50 +01:00
Christian Dupuis e009d3e47d Polish
Fixed inconsistency in method naming after last polish. Method and class name should use 'crsh' instead of 'crash' to be aligned with CRaSH code base.

Implemented facility to provide custom shell properties by adding beans of type CrshShellProperties to the ApplicationContext.
2013-11-18 17:20:45 +01:00
Christian Dupuis dc252c7417 Remove unnecessary String concatenation 2013-11-18 15:06:05 +01:00
Dave Syer 2f7214002d Update Spring to catch SPR-11069 2013-11-17 07:59:16 +00:00
Phillip Webb 0f85f31960 Polish 2013-11-16 01:22:10 -08:00
Phillip Webb 64f32893bb Source format and clean-up 2013-11-16 00:08:18 -08:00
Phillip Webb 883fd9162f Polish 2013-11-16 00:08:17 -08:00
Dave Syer b39ab925cf Make the AutoConfigurationReportEndpoint path a bit shorter 2013-11-14 14:54:32 +00:00
Phillip Webb dc3d670019 Strip trailing whitespace 2013-11-07 10:32:57 -08:00
Christian Dupuis 1f922f49b0 Switch to placeholders in conditional expressions; Ensure that Crsh auto configuration works without Spring Security 2013-11-07 12:48:03 +01:00
Christian Dupuis a498a7f477 Make simple authentication the default and log default password 2013-11-07 12:48:03 +01:00
Phillip Webb dafeddca09 Rework auto-configure report
Update the auto-configuration report to improve log formatting and to
separate the internal report data-structure from the JSON friendly
endpoint data-structure.
2013-11-06 21:40:05 -08:00
Phillip Webb ab249b034d Rename Outcome -> ConditionOutcome 2013-11-06 15:40:09 -08:00
Christian Dupuis 9f13d291ec Return early if no plugins should be disabled 2013-11-06 10:35:15 +01:00
Phillip Webb b39ed89a6f Increase whitespace around password logging
Increase the whitespace to make the password easier to find in the log.
2013-11-05 10:31:11 -08:00
Dave Syer 68475406eb Really fix it 2013-11-05 15:32:53 +00:00
Dave Syer c144cae600 Comment out security condition pending SPR-11069 2013-11-05 14:20:51 +00:00
Phillip Webb d784cb6a88 Apply eclipse-formatter conventions 2013-11-04 10:25:27 -08:00
Dave Syer 0c79c8913f Ensure AutoConfigurationReport is always present 2013-11-04 17:07:04 +00:00
Greg Turnquist b63016d8fc Create a report based on Boot's autoconfiguration decisions
- Gather autoconfiguration conditional decisiions (true and false)
- Provide an actuator endpoint as one means to read the report
- Define @EnableAutConfigurationReport annotation to turn this feature on
- Tidy up autoconfig report a bit and log it if --debug=true
2013-11-04 17:07:04 +00:00
Christian Dupuis f9caade3cc Fix test assertion 2013-11-04 17:43:06 +01:00
Christian Dupuis 6b599b8483 Add remote shell implementation based on crsh
This commit adds a new starter named spring-boot-starter-shell-crsh and auto configuration support to embed a system shell within Spring Boot applications.

The embedded shell allows clients to connect via ssh or telnet to the Boot app and execute commands. Commands can be implemented and embedded with app.

For sample usage see spring-boot-samples-actuator.
2013-11-04 17:22:02 +01:00
Dave Syer c29d2b1be4 Remove a small race condition 2013-11-04 13:35:59 +00:00
Dave Syer 7e7d4b7d3d Only do Actuator MVC config if in a web app 2013-11-02 16:36:03 +00:00
Dave Syer bd719c1330 Nest the @EnableWebSecurity so it can be added to a condition 2013-11-01 17:46:37 +00:00
Dave Syer 761c2dabd1 Fix build 2013-11-01 17:07:24 +00:00
Dave Syer 1bd65c7487 Make context hierarchies play nicely with actuator 2013-11-01 16:27:47 +00:00
Dave Syer f84df423e8 Better implementation of ignores in security config 2013-11-01 15:07:02 +00:00
Dave Syer e4d594cce5 Avoid registering endpoints if Spring MVC not available 2013-11-01 11:57:32 +00:00
Dave Syer e53dad879d Add sample with form login 2013-11-01 11:28:53 +00:00
Dave Syer 63a2d06767 Explicitly disable security on management endpoints if requested
Previously the management endpoint filter was applied to all requests
if the user had disabled security.management.enabled, but since it
had no security applied it was letting all requests through.

The fix was to explicitly exclude the whole enclosing configuration
and carefully ignore the management endpoints in the normal security
chain.

Fixes gh-100.
2013-10-31 18:46:39 +00:00
Dave Syer 5e9b8c3340 Add missing depdendency 2013-10-31 16:49:36 +00:00
Rob Winch 77b5ad1b0b Update to Spring Security Snapshot 2013-10-31 16:45:46 +00:00
Dave Syer 0498617411 Disable whitelabel view if Thymeleaf error.html detected 2013-10-23 10:48:14 -04:00
Dave Syer 4b2cea7267 Add simple DB aware HealthIndicator 2013-10-23 08:33:47 -04:00
Dave Syer fede0d1c98 Add profiles to /env 2013-10-16 13:42:13 -04:00
Dave Syer cd5bc83533 Fix build some more after changes for gh-84 2013-10-10 16:47:11 -04:00
Dave Syer 228787e66d Fix build after changes for gh-84 2013-10-10 14:48:37 -04:00
ggerard 182328697d Spelling error: "everypone" 2013-10-03 17:26:30 -04:00
Dave Syer 345c0fc5a4 Add SpringApplicationBuilder
Builder for SpringApplication and ApplicationContext instances with
convenient fluent API and context hierarchy support. Simple example
of a context hierarchy:

   new SpringApplicationBuilder(ParentConfig.class)
               .child(ChildConfig.class).run(args);

Another common use case is setting default arguments, e.g.
active Spring profiles, to set up the environment for an application:

     new SpringApplicationBuilder(Application.class).profiles("server")
 		.defaultArgs("--transport=local").run(args);

If your needs are simpler, consider using the static convenience
methods in SpringApplication instead.

[#49703716] [bs-116] Parent context for some beans maybe?
2013-10-02 07:06:12 -04:00
Dave Syer 0df4156b57 Lazy initialization of management server properties 2013-10-02 06:41:21 -04:00
Dave Syer f7fa63bcb4 Add status and error messages to /trace
[Fixes #57949108] [bs-323] Make sure /trace shows error responses
2013-10-01 14:48:07 -04:00
Dave Syer ecc4676fb3 Tweak security example 2013-09-18 16:43:38 +01:00
lecaros cf4f549b06 change credentials order in authentication manager example
username/password pairs were incorrect. The authentication manager has "user" and "password", so those credentials should be allowed to get the actual message.
2013-09-18 16:43:38 +01:00