spring/spring-cloud-netflix
1
0
Fork 0
mirror of https://github.com/spring-cloud/spring-cloud-netflix.git synced 2026-09-17 15:49:00 +00:00
Code Issues Projects Releases Wiki Activity

Merge remote-tracking branch 'origin/4.0.x'

Browse Source
This commit is contained in:
Olga MaciaszekSharma
2023-06-16 16:28:57 +02:00
parent e8bd633d8f cd9cd7be5a
commit 0a07ca18a2
1 changed files with 9 additions and 10 deletions
Download Patch File Download Diff File Expand all files Collapse all files
docs/src/main/asciidoc/spring-cloud-netflix.adoc
+9 -10
View File
@@ -575,27 +575,26 @@ You can set your hostname at the run-time by using an environment variable -- fo
=== Securing The Eureka Server === Securing The Eureka Server
You can secure your Eureka server simply by adding Spring Security to your You can secure your Eureka server simply by adding Spring Security to your
server's classpath via `spring-boot-starter-security`. By default when Spring Security is on the classpath it will require that server's classpath via `spring-boot-starter-security`. By default, when Spring Security is on the classpath it will require that
a valid CSRF token be sent with every request to the app. Eureka clients will not generally possess a valid a valid CSRF token be sent with every request to the app. Eureka clients will not generally possess a valid
cross site request forgery (CSRF) token you will need to disable this requirement for the `/eureka/**` endpoints. cross site request forgery (CSRF) token you will need to disable this requirement for the `/eureka/**` endpoints.
For example: For example:
[source,java,indent=0] [source,java,indent=0]
---- ----
@EnableWebSecurity @Bean
class WebSecurityConfig extends WebSecurityConfigurerAdapter { public SecurityFilterChain securityFilterChain(HttpSecurity http) throws Exception {
http.authorizeHttpRequests((authz) -> authz
@Override .anyRequest().authenticated())
protected void configure(HttpSecurity http) throws Exception { .httpBasic(withDefaults());
http.csrf().ignoringAntMatchers("/eureka/**"); http.csrf().ignoringRequestMatchers("/eureka/**");
super.configure(http); return http.build();
}
} }
---- ----
For more information on CSRF see the https://docs.spring.io/spring-security/site/docs/current/reference/htmlsingle/#csrf[Spring Security documentation]. For more information on CSRF see the https://docs.spring.io/spring-security/site/docs/current/reference/htmlsingle/#csrf[Spring Security documentation].
A demo Eureka Server can be found in the Spring Cloud Samples https://github.com/spring-cloud-samples/eureka/tree/Eureka-With-Security[repo]. A demo Eureka Server can be found in the Spring Cloud Samples https://github.com/spring-cloud-samples/eureka/tree/Eureka-With-Security-4.x[repo].
=== JDK 11 Support === JDK 11 Support