The /shutdown endpoint appears to be open by default

[philwebb]

During the labs training it was noticed that /shutdown could be hit by default without any security.

[syepes]

Hello,
I have also noticed that that is a try to disable the /shutdown endpoints using the
application.properties file, it does not work.

Is this normal? or is it just me.

endpoints.shutdown.enabled=false

[dsyer]

It's normal in the sense that it was a bug (now fixed).

[syepes]

Ok thanks, do you know if its included in the version 1.0.0.RC3?

[dsyer]

Yes I do. No it is not.

[syepes]

Thanks for the info,
I have also tested disabling the other endpoints and they also present the same issue.

endpoints.dump.enabled:false
endpoints.env.enabled:false
endpoints.health.enabled:false
endpoints.info.enabled:false
endpoints.metrics.enabled:false
endpoints.trace.enabled:false

[dsyer]

Did you try with a snapshot?

[syepes]

Ok, I have tested all of the endpoints and its working correctly with the snapshot version.
Thanks for the help.