This is an automated email from the ASF dual-hosted git repository.
pjfanning pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/pekko-management.git
The following commit(s) were added to refs/heads/main by this push:
new f20911c0 warn if no authenticator enabled (#934)
f20911c0 is described below
commit f20911c0be83bd689e6f5523069c5668ef59f41e
Author: PJ Fanning <[email protected]>
AuthorDate: Fri Aug 14 22:17:20 2026 +0100
warn if no authenticator enabled (#934)
---
.../management/scaladsl/PekkoManagement.scala | 4 +++
.../PekkoManagementHttpEndpointSpec.scala | 29 ++++++++++++++++++++++
2 files changed, 33 insertions(+)
diff --git
a/management/src/main/scala/org/apache/pekko/management/scaladsl/PekkoManagement.scala
b/management/src/main/scala/org/apache/pekko/management/scaladsl/PekkoManagement.scala
index 9c03cb10..795abb30 100644
---
a/management/src/main/scala/org/apache/pekko/management/scaladsl/PekkoManagement.scala
+++
b/management/src/main/scala/org/apache/pekko/management/scaladsl/PekkoManagement.scala
@@ -198,6 +198,10 @@ final class PekkoManagement(implicit private[pekko] val
system: ExtendedActorSys
val providerSettingsImpl =
providerSettings.asInstanceOf[ManagementRouteProviderSettingsImpl]
(providerSettingsImpl.scaladslAuth, providerSettingsImpl.javadslAuth)
match {
case (None, None) =>
+ log.warning(
+ "No authenticator is configured for Pekko Management HTTP
endpoints. " +
+ "All management routes are accessible without authentication. " +
+ "Consider configuring an authenticator via
ManagementRouteProviderSettings.withAuth().")
inner
case (Some(asyncAuthenticator), None) =>
diff --git
a/management/src/test/scala/org/apache/pekko/management/PekkoManagementHttpEndpointSpec.scala
b/management/src/test/scala/org/apache/pekko/management/PekkoManagementHttpEndpointSpec.scala
index ebdda9c3..b40d8bc7 100644
---
a/management/src/test/scala/org/apache/pekko/management/PekkoManagementHttpEndpointSpec.scala
+++
b/management/src/test/scala/org/apache/pekko/management/PekkoManagementHttpEndpointSpec.scala
@@ -103,6 +103,35 @@ class PekkoManagementHttpEndpointSpec extends
AnyWordSpecLike with Matchers {
finally system.terminate()
}
+ "log a warning when no authenticator is configured" in {
+ val httpPort = SocketUtil.temporaryLocalPort()
+ val configClusterHttpManager = ConfigFactory.parseString(
+ s"""
+ pekko.management.http.hostname = "127.0.0.1"
+ pekko.management.http.port = $httpPort
+ pekko.management.http.routes {
+ testNoAuth =
"org.apache.pekko.management.HttpManagementEndpointSpecRoutesScaladsl"
+ }
+ """)
+
+ implicit val system: ActorSystem = ActorSystem("test",
config.withFallback(configClusterHttpManager).resolve())
+
+ val management = PekkoManagement(system)
+
+ // Verify that management routes are accessible without authentication.
+ // When no authenticator is configured, a warning is logged:
+ // "No authenticator is configured for Pekko Management HTTP
endpoints..."
+ Await.result(management.start(), 10.seconds)
+
+ val response = Await.result(
+ Http().singleRequest(HttpRequest(uri =
s"http://127.0.0.1:$httpPort/scaladsl";)),
+ 5.seconds)
+ response.status shouldEqual StatusCodes.OK
+
+ try Await.ready(management.stop(), 5.seconds)
+ finally system.terminate()
+ }
+
"setting basic authentication" in {
val httpPort = SocketUtil.temporaryLocalPort()
val configClusterHttpManager = ConfigFactory.parseString(
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
