"description":"Comma-separated list of required roles to login to the CRaSH console.",
"defaultValue":["ACTUATOR"],
"deprecation":{
"reason":"CRaSH support is no longer available.",
"level":"error"
"name":"management.shell.auth.spring.roles",
"type":"java.lang.String[]",
"description":"Comma-separated list of required roles to login to the CRaSH console.",
"defaultValue":[
"ACTUATOR"
],
"deprecation":{
"reason":"CRaSH support is no longer available.",
"level":"error"
}
},
{
"name":"management.shell.auth.type",
"type":"java.lang.String",
"description":"Authentication type. Auto-detected according to the environment (i.e. if Spring\n Security is available, \"spring\" is used by default).",
"defaultValue":"simple",
"deprecation":{
"reason":"CRaSH support is no longer available.",
"level":"error"
"name":"management.shell.auth.type",
"type":"java.lang.String",
"description":"Authentication type. Auto-detected according to the environment (i.e. if Spring\n Security is available, \"spring\" is used by default).",
"defaultValue":"simple",
"deprecation":{
"reason":"CRaSH support is no longer available.",
"level":"error"
}
},
{
"name":"management.shell.command-path-patterns",
"type":"java.lang.String[]",
"description":"Patterns to use to look for commands.",
"description":"Preferred JSON mapper to use for HTTP message conversion. Set to \"gson\" to force the use of Gson when both it and Jackson are on the classpath."
"description":"Preferred JSON mapper to use for HTTP message conversion. Set to \"gson\" to force the use of Gson when both it and Jackson are on the classpath."
"reason":"The security auto-configuration is no longer customizable. Provide your own WebSecurityConfigurer bean instead.",
"level":"error"
"level":"error"
}
},{
"name":"security.headers.hsts",
"description":"HTTP Strict Transport Security (HSTS) mode (none, domain, all).",
"defaultValue":"all",
"deprecation":{
},
{
"name":"security.headers.hsts",
"description":"HTTP Strict Transport Security (HSTS) mode (none, domain, all).",
"defaultValue":"all",
"deprecation":{
"reason":"The security auto-configuration is no longer customizable. Provide your own WebSecurityConfigurer bean instead.",
"level":"error"
}
},{
"name":"security.headers.xss",
"type":"java.lang.Boolean",
"description":"Enable cross site scripting (XSS) protection.",
"defaultValue":true,
"deprecation":{
"level":"error"
}
},
{
"name":"security.headers.xss",
"type":"java.lang.Boolean",
"description":"Enable cross site scripting (XSS) protection.",
"defaultValue":true,
"deprecation":{
"reason":"The security auto-configuration is no longer customizable. Provide your own WebSecurityConfigurer bean instead.",
"level":"error"
"level":"error"
}
},{
"name":"security.ignored",
"type":"java.util.List<java.lang.String>",
"description":"Comma-separated list of paths to exclude from the default secured paths.",
"deprecation":{
},
{
"name":"security.ignored",
"type":"java.util.List<java.lang.String>",
"description":"Comma-separated list of paths to exclude from the default secured paths.",
"deprecation":{
"reason":"The security auto-configuration is no longer customizable. Provide your own WebSecurityConfigurer bean instead.",
"level":"error"
}
},{
"name":"security.oauth2.resource.filter-order",
"type":"java.lang.Integer",
"description":"The order of the filter chain used to authenticate tokens. Default puts it after\n the actuator endpoints and before the default HTTP basic filter chain (catchall).",
"defaultValue":0,
"deprecation":{
"level":"error"
}
},
{
"name":"security.oauth2.resource.filter-order",
"type":"java.lang.Integer",
"description":"The order of the filter chain used to authenticate tokens. Default puts it after\n the actuator endpoints and before the default HTTP basic filter chain (catchall).",
"defaultValue":0,
"deprecation":{
"reason":"The security auto-configuration does no longer provide several security configurations. Their ordering is now explicit in your own security configuration.",
"level":"error"
"level":"error"
}
},{
"name":"security.oauth2.sso.filter-order",
"type":"java.lang.Integer",
"description":"Filter order to apply if not providing an explicit WebSecurityConfigurerAdapter (in\n which case the order can be provided there instead).",
"deprecation":{
},
{
"name":"security.oauth2.sso.filter-order",
"type":"java.lang.Integer",
"description":"Filter order to apply if not providing an explicit WebSecurityConfigurerAdapter (in\n which case the order can be provided there instead).",
"deprecation":{
"reason":"The security auto-configuration does no longer provide several security configurations. Their ordering is now explicit in your own security configuration.",
"level":"error"
}
},{
"name":"security.require-ssl",
"type":"java.lang.Boolean",
"description":"Enable secure channel for all requests.",
"defaultValue":false,
"deprecation":{
"level":"error"
}
},
{
"name":"security.require-ssl",
"type":"java.lang.Boolean",
"description":"Enable secure channel for all requests.",
"defaultValue":false,
"deprecation":{
"reason":"The security auto-configuration is no longer customizable. Provide your own WebSecurityConfigurer bean instead.",