82f89b4ac1
Add custom headers to allowed CORS headers for CF actuators
...
Update CORS configuration to support Authorization and X-Cf-App-Instance.
See gh-7108
8 years ago
3018e95261
Merge branch '1.4.x' into 1.5.x
8 years ago
d405265e83
Merge pull request #7326 from sebastiankirsch:master
...
* pr/7326:
Polish contribution
Add @Inherited to all AutoConfigure* classes
8 years ago
ebfd86ea26
Polish contribution
...
Closes gh-7326
8 years ago
e8b0a64872
Add @Inherited to all AutoConfigure* classes
...
See gh-7326
8 years ago
101528f41a
Merge branch '1.4.x' into 1.5.x
8 years ago
f80dbd1a21
Upgrade to joda-time 2.9.5
...
Closes gh-7308
8 years ago
b51f92d9a4
Merge branch '1.4.x' into 1.5.x
8 years ago
32950bfec1
Merge pull request #7299 from vpavic:resource-server-config
...
* pr/7299:
Fix JWT token URI derivation
8 years ago
5783cd5593
Fix JWT token URI derivation
...
Closes gh-7299
8 years ago
01e66ecbd5
Merge branch '1.4.x' into 1.5.x
8 years ago
4311cf333f
Remove sample reference in build
8 years ago
2c71cb8efd
Polish
8 years ago
4407194c00
Replace sample by integration test
...
Closes gh-3888
8 years ago
389acb094b
Merge branch '1.4.x' into 1.5.x
8 years ago
44a32d0a5b
Merge pull request #7322 from izeye:polish-20161105
...
* pr/7322:
Polish
8 years ago
ec9f0ab6b4
Polish
...
Closes gh-7322
8 years ago
6c76353682
Default `management.cloudfoundry.enabled` to true
...
Update `CloudFoundryActuatorAutoConfiguration` so that it is enabled
when `management.cloudfoundry.enabled` is missing.
See gh-7108
8 years ago
a77cfc3b0e
Skip SSL validation when calling Cloud Foundry
...
Update CloudFoundrySecurityService so that SSL validation is not
required. We're unlikely to have configured public keys for the
REST endpoints we need to call. Since the endpoints are provided via
environment variables we can implicitly trust them.
See gh-7108
8 years ago
862a06eb7a
Add POST to allowed CORS methods for CF actuators
...
Update CORS configuration to support POST.
See gh-7108
8 years ago
1005feb27d
Update discovery endpoint to respect AccessLevel
...
Change `CloudFoundryDiscoveryMvcEndpoint` so that `AccessLevel` rights
are consulted so that only accessible links are returned.
See gh-7108
8 years ago
340f1d5574
Add security for Cloud Foundry actuators
...
Add security to Cloud Foundry actuator endpoints. Security is enforced
by a `HanderInterceptor` on `CloudFoundryEndpointHandlerMapping`. Each
endpoint call expects an 'Authorization' header containing a bearer
token. The token signature is checked against the UAA public keys then
passed to the Cloud Controller to obtain an ultimate access level.
The client may either have 'RESTRICTED' or FULL' access, with the latter
only providing access to a limited set of endpoints.
See gh-7108
8 years ago
f15e0482c5
Merge branch '1.4.x' into 1.5.x
8 years ago
1bd53ea9d8
Support package private requestFactory classes
...
Update `RestTemplateBuilder` to support package private `requestFactory`
classes.
Fixes gh-7319
8 years ago
221feac3ec
User random server port in devtools tests
...
Update `LocalDevToolsAutoConfigurationTests` to ensure that a random
server port is used rather than 8080.
Fixes gh-7268
See gh-7039
8 years ago
e5073a7172
Upgrade to Spring Security 4.2.0.RC1
...
Closes gh-7186
8 years ago
025bafd911
Polish new Actuator sample
8 years ago
81c5753f4d
Merge branch '1.4.x' into 1.5.x
8 years ago
90afc8ebbe
Formatting
8 years ago
6a2ac080ac
Create our own SessionCreationPolicy enum
...
Update `ManagementServerProperties` so that `security.sessions` no
longer uses `SessionCreationPolicy` from Spring Security. We now
use our own enun which allows `management.security.*` properties to
be set without the risk of a `ClassNotFoundException`.
Fixes gh-3888
8 years ago
bdfceae24c
Merge branch '1.4.x' into 1.5.x
8 years ago
97e5e32496
Make sure the MetricsFilter uses committed response's status
...
Previously, if an exception was thrown during request handling after
the response had been committed, i.e. after the status and headers
had been written, the metrics filter would assume that it was a 500
response. This was potentially inaccurate as the status had already
been sent to the client and before the exception was thrown and it
may have been something other than a 500.
This commit updates MetricsFilter so that it will use the
status from the response if the response has been committed even when
an exception is thrown.
Closes gh-7277
8 years ago
ab2e12fd76
Merge branch '1.4.x' into 1.5.x
8 years ago
6a87df8e46
Upgrade to Spring Data Hopper SR5
...
Closes gh-7275
8 years ago
73308ba24b
Merge remote-tracking branch 'springsource/1.4.x' into 1.5.x
8 years ago
b04a74f01d
Fix failure analysis for Collections and Maps
...
Closes gh-6996
8 years ago
f468bc3ffb
Merge branch '1.4.x' into 1.5.x
8 years ago
f02fa161b2
Upgrade to Jedis 2.8.2
...
Closes gh-7298
8 years ago
3d8428934e
Upgrade to Spring Ws 2.3.1.RELEASE
...
Closes gh-7297
8 years ago
b8df641ae5
Upgrade to Postgresql 9.4.1212.jre7
...
Closes gh-7296
8 years ago
5e1d6f6ea8
Upgrade to Jooq 3.8.5
...
Closes gh-7295
8 years ago
f02e37cc4d
Upgrade to Jolokia 1.3.5
...
Closes gh-7294
8 years ago
216e68bfe1
Upgrade to Narayana 5.3.5.Final
...
Closes gh-7293
8 years ago
0104ca435d
Upgrade to Elasticsearch 2.4.1
...
Closes gh-7292
8 years ago
7d1164c279
Upgrade to Ehcache3 3.1.3
...
Closes gh-7291
8 years ago
4787a6059d
Upgrade to Jetty 9.3.14.v20161028
...
Closes gh-7290
8 years ago
05ee521124
Upgrade to Tomcat 8.5.6
...
Closes gh-7289
8 years ago
ecbe1a70bb
Upgrade to Ehcache 2.10.3
...
Closes gh-7288
8 years ago
0d24a7f2aa
Upgrade to Mysql 5.1.40
...
Closes gh-7287
8 years ago
1057efad21
Upgrade to Commons Beanutils 1.9.3
...
Closes gh-7286
8 years ago
Madhura Bhave
Stephane Nicoll
sebastiankirsch
Vedran Pavic
Johnny Lim
Phillip Webb
Andy Wilkinson