8 Commits (7006f222ab1f9856d95ed8d81bbbe58583463f76)

Author	SHA1	Message	Date
Christian Dupuis	6b599b8483	Add remote shell implementation based on crsh ... This commit adds a new starter named spring-boot-starter-shell-crsh and auto configuration support to embed a system shell within Spring Boot applications. The embedded shell allows clients to connect via ssh or telnet to the Boot app and execute commands. Commands can be implemented and embedded with app. For sample usage see spring-boot-samples-actuator.	11 years ago
Dave Syer	63a2d06767	Explicitly disable security on management endpoints if requested ... Previously the management endpoint filter was applied to all requests if the user had disabled security.management.enabled, but since it had no security applied it was letting all requests through. The fix was to explicitly exclude the whole enclosing configuration and carefully ignore the management endpoints in the normal security chain. Fixes gh-100.	11 years ago
Dave Syer	0498617411	Disable whitelabel view if Thymeleaf error.html detected	11 years ago
Dave Syer	f7fa63bcb4	Add status and error messages to /trace ... [Fixes #57949108] [bs-323] Make sure /trace shows error responses	11 years ago
Dave Syer	1e0e2e7102	Switch off CSRF filter ... Might need to revisit later.	11 years ago
Dave Syer	43fc107437	Fix security config ... The management endpoints were still all mixed up with the user endpoints. Fixed that and extracted user endpoints in to conditional block so not protected if path explicitly set to empty string. [#53029715]	11 years ago
Dave Syer	621116c9b8	ManagementServerConfiguration security ... Management endpoints are still secure by default if Spring Security is present, but now the default user details have an ADMIN role, and a random password (which is logged at INFO level if not overridden). To override you add management.user.password (name, role) to external properties. [Fixes #53029715] [bs-203]	11 years ago
Dave Syer	5995b7727a	Ops -> Actuator	11 years ago