{"action":"opened","issue":{"url":"https://api.github.com/repos/spring-projects/spring-boot/issues/2653","labels_url":"https://api.github.com/repos/spring-projects/spring-boot/issues/2653/labels{/name}","comments_url":"https://api.github.com/repos/spring-projects/spring-boot/issues/2653/comments","events_url":"https://api.github.com/repos/spring-projects/spring-boot/issues/2653/events","html_url":"https://github.com/spring-projects/spring-boot/issues/2653","id":61560299,"number":2653,"title":"Spring Actuator Security with Spring boot","user":{"login":"cristianprofile","id":7360956,"avatar_url":"https://avatars.githubusercontent.com/u/7360956?v=3","gravatar_id":"","url":"https://api.github.com/users/cristianprofile","html_url":"https://github.com/cristianprofile","followers_url":"https://api.github.com/users/cristianprofile/followers","following_url":"https://api.github.com/users/cristianprofile/following{/other_user}","gists_url":"https://api.github.com/users/cristianprofile/gists{/gist_id}","starred_url":"https://api.github.com/users/cristianprofile/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/cristianprofile/subscriptions","organizations_url":"https://api.github.com/users/cristianprofile/orgs","repos_url":"https://api.github.com/users/cristianprofile/repos","events_url":"https://api.github.com/users/cristianprofile/events{/privacy}","received_events_url":"https://api.github.com/users/cristianprofile/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":0,"created_at":"2015-03-14T11:00:34Z","updated_at":"2015-03-14T11:00:34Z","closed_at":null,"body":"When I create a web app with spring boot/mvc with spring security and I try to get secure my actuator's endpoints Spring security redirect my actuator context path to context path/login. \r\n\r\n**App Config**\r\n\r\napplication.yml\r\n\r\n```server:\r\n    port: 9090\r\n    contextPath: /pizza\r\n    session-timeout: 10\r\nmanagement:\r\n    port: 9091\r\n    address: 127.0.0.1\r\n    context-path: /manage\r\n    security: \r\n            enabled: true\r\n            role: ADMIN\r\n```\r\n\r\nsecurity config class\r\n \r\n```\r\n http.authorizeRequests().antMatchers(\"/pizzas\",\"/info\",\"/addPizza\").hasAnyRole(\"USER\",\"ADMIN\").and()\r\n\t\t.authorizeRequests().antMatchers(\"/users\",\"/addUser\").hasRole(\"ADMIN\").and()\r\n\t\t.authorizeRequests().antMatchers(\"/static/**\",\"/logout\",\"/login\").permitAll();\r\n\r\nhttp.formLogin().loginPage(\"/login\").failureUrl(\"/login?error\").permitAll();\r\n\t\t\r\nhttp.logout().logoutSuccessUrl(\"/?logout\").deleteCookies(\"remember-me\").permitAll();\r\n```        \r\n\r\nHttp request redirect to localhost:9091/manage/login.This mapping is obviously wrong because it does not exist. Login page was created at pizza context path which is the context of Spring Boot web app.\r\n \r\nWhich would be the best way to use Spring security configured at my app (pizza) to be used in actuator security?"}}