This is my config for actuators and spring.

cas:

...
monitor:

endpoints:
endpoint:
defaults:
access: ANONYMOUS
info:
access: ANONYMOUS


management:
endpoints:
web:
base-path: /actuators
exposure:
include:
- health
- info
- status
endpoint:
health:
access: UNRESTRICTED
info:
access: UNRESTRICTED
status:
access: UNRESTRICTED
metrics:
access: UNRESTRICTED

spring:
aop:
proxy-target-class: true
autoconfigure:
exclude:
-
org.springframework.boot.autoconfigure.security.servlet.SecurityAutoConfiguration
boot:
admin:
server:
enabled: false
main:
allow-bean-definition-overriding: true
security:
ignored-paths: /error,/favicon.ico,/robots.txt


Ronnie Otts
Enterprise Engineer II
University of West Florida
850.474.3123


On Sat, Nov 1, 2025 at 6:03 AM Y G <[email protected]> wrote:

> Hello, is it because actuator is set up, or in 404 requests, is CAS
> configured by default for these other urls as authenticated(i'm talking
> about Spring Security Configs)?
>
> 1 Kasım 2025 Cumartesi tarihinde saat 05:33:38 UTC+3 itibarıyla rotts
> şunları yazdı:
>
>> When browsing to a URL that should return a 404 page, the browser instead
>> prompts for basic authentication.
>>
>> For example, accessing /cas/x prompts the user for credentials with a
>> basic auth dialog, not the normal login page.
>>
>> I’d like to have users directed to a standard 404 page instead.
>>
>

-- 
- Website: https://apereo.github.io/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
--- 
You received this message because you are subscribed to the Google Groups "CAS 
Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To view this discussion visit 
https://groups.google.com/a/apereo.org/d/msgid/cas-user/CA%2BPGbkUN2CcrtJbg3g9DBuU-K3FZ_A30MbsL-zDMu9J9RJ4FWg%40mail.gmail.com.

Reply via email to