Skip to content

feat(api): add spring.security.debug to enable/disable debug mode (@EnableWebSecurity) #1302

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
jreynard-code merged 1 commit into from
Oct 15, 2026
+13 −1
Merged

feat(api): add spring.security.debug to enable/disable debug mode (@EnableWebSecurity) #1302

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 2 additions & 0 deletions api/src/main/resources/application.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -5,6 +5,8 @@ logging:
OkHttpClient: WARN

spring:
security:
debug: false
ai:
mcp:
server:
Expand Down
10 changes: 9 additions & 1 deletion ...n/src/main/kotlin/com/cosmotech/common/security/keycloak/KeycloakSecurityConfiguration.kt
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -23,6 +23,7 @@ import org.springframework.security.authentication.AbstractAuthenticationToken
import org.springframework.security.config.annotation.method.configuration.EnableMethodSecurity
import org.springframework.security.config.annotation.web.builders.HttpSecurity
import org.springframework.security.config.annotation.web.configuration.EnableWebSecurity
import org.springframework.security.config.annotation.web.configuration.WebSecurityCustomizer
import org.springframework.security.core.GrantedAuthority
import org.springframework.security.core.authority.SimpleGrantedAuthority
import org.springframework.security.oauth2.core.DelegatingOAuth2TokenValidator
Expand All @@ -39,7 +40,7 @@ import org.springframework.util.CollectionUtils
import org.springframework.util.StringUtils

@Configuration
@EnableWebSecurity(debug = true)
@EnableWebSecurity
@ConditionalOnProperty(
name = ["csm.platform.identityProvider.code"],
havingValue = "keycloak",
Expand All @@ -65,6 +66,13 @@ internal open class KeycloakSecurityConfiguration(

@Value("\${csm.platform.identityProvider.tls.bundle}") private var tlsBundle: String = ""

@Value("\${spring.security.debug:false}") private var springSecurityDebug: Boolean = false

@Bean
fun webSecurityCustomizer(): WebSecurityCustomizer {
return WebSecurityCustomizer { customizer -> customizer.debug(springSecurityDebug) }
}

@Bean(name = ["KeycloakFilterChain"])
open fun filterChain(http: HttpSecurity): SecurityFilterChain {
logger.info("Okta http security configuration")
Expand Down
2 changes: 2 additions & 0 deletions config/application-dev.sample.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -34,6 +34,8 @@ management:
port: 8081

spring:
security:
debug: false
ssl:
bundle:
pem:
Expand Down
Loading