[SYNCOPE-1760] Align Core Spring Boot actuator endpoint security with other components

• Type: Improvement
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 3.0.3
• Fix Version/s: 3.0.4, 4.0.0-M0
• Component/s: core
• Assignee: Francesco Chicchiriccò
• Reporter: Francesco Chicchiriccò
• Created: 25/May/23 08:17
• Updated: 07/Jul/23 06:23
• Resolved: 26/May/23 12:46

Description

Currently, all Spring Boot actuator endpoints are configured to require authentication for the anonymous user, for all components but Core:

• Console
• Enduser
• SRA
• WA

For Core, instead, all Spring Boot actuator endpoints are public, but /info.

We need to align Core with the rest of components.

Issue Links

• links to: GitHub Pull Request #463
• links to: GitHub Pull Request #464