Skip to content
Open
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
8 changes: 8 additions & 0 deletions openaev-api/pom.xml
Original file line number Diff line number Diff line change
Expand Up @@ -286,6 +286,14 @@
<artifactId>zip4j</artifactId>
<version>2.11.5</version>
</dependency>
<dependency>
<groupId>org.springframework.boot</groupId>
<artifactId>spring-boot-starter-actuator</artifactId>
</dependency>
<dependency>
<groupId>io.micrometer</groupId>
<artifactId>micrometer-registry-prometheus</artifactId>
</dependency>
</dependencies>

<build>
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -85,6 +85,8 @@ public SecurityFilterChain filterChain(HttpSecurity http) throws Exception {
.permitAll()
.requestMatchers("/api/**")
.authenticated()
.requestMatchers("/actuator/**")
.authenticated()
.anyRequest()
.permitAll())
.logout(
Expand Down
7 changes: 7 additions & 0 deletions openaev-api/src/main/resources/application.properties
Original file line number Diff line number Diff line change
Expand Up @@ -382,3 +382,10 @@ pyroscope.server.address=<pyroscope.url>
#remediation.detection.webservice=
#remediation.detection.webservice.retry=
#remediation.detection.webservice.retry.waiting.milliseconds=


# Enable actuator -> disabled by default
Copy link

Copilot AI Jan 9, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The empty value for management.endpoints.web.exposure.include could be unclear to users. Consider adding a comment explaining that an empty value disables all endpoints, or explicitly set it to 'none' for clarity.

Suggested change
# Enable actuator -> disabled by default
# Enable actuator -> disabled by default
# Leaving this value empty disables exposure of all actuator endpoints.

Copilot uses AI. Check for mistakes.
management.endpoints.web.exposure.include=
#management.endpoints.web.exposure.include=metrics,prometheus
management.endpoint.health.show-details=always
management.server.port=8080
Comment on lines +390 to +391
Copy link

Copilot AI Jan 9, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The management.server.port is set to 8080, which is likely the same port as the main application server. This will cause a port conflict when the actuator endpoints are enabled. Consider using a different port (e.g., 8081) for the management server or remove this property to use the same port as the main application without creating a separate management server.

Suggested change
management.endpoint.health.show-details=always
management.server.port=8080
management.endpoint.health.show-details=always

Copilot uses AI. Check for mistakes.