Opens actuator entrypoint to everyone (#313)

Co-authored-by: Hervé Le Meur <[email protected]>
jenkins-infra · May 23, 2023 · 10c69c1 · 10c69c1
1 parent f813f2d
commit 10c69c1
Showing 1 changed file with 7 additions and 1 deletion.
diff --git a/war/src/main/java/io/jenkins/pluginhealth/scoring/config/SecurityConfiguration.java b/war/src/main/java/io/jenkins/pluginhealth/scoring/config/SecurityConfiguration.java
@@ -40,7 +40,13 @@ public SecurityFilterChain securityFilterChain(HttpSecurity http) throws Excepti
             .authorizeHttpRequests(request ->
                 request
                     .requestMatchers(HttpMethod.GET, "/js/*", "/style.css", "/svg/*").permitAll()
-                    .requestMatchers(HttpMethod.GET, "/api/scores", "/", "/probes", "/probes/*", "/scores", "/scores/*").permitAll()
+                    .requestMatchers(HttpMethod.GET,
+                        "/api/scores",
+                        "/",
+                        "/probes", "/probes/*",
+                        "/scores", "/scores/*",
+                        "/actuator/*"
+                    ).permitAll()
                     .anyRequest().authenticated()
             );
         return http.build();