jamesfredley commented on code in PR #16791:
URL: https://github.com/apache/grails-core/pull/16791#discussion_r4411563118
##########
grails-spring-security/plugin/grails-app/conf/DefaultSecurityConfig.groovy:
##########
@@ -51,6 +51,9 @@ security {
// Also consider using fii.rejectPublicInvocations = true
rejectIfNoRule = true
+ // respond with 503 to requests received before the application has started
+ rejectRequestsDuringStartup = true
Review Comment:
This defaults the startup gate on, so a request that arrives before the
application has started gets 503, including a static resource. The Spring
Security guide does not name rejectRequestsDuringStartup, the default, or how
to turn it off. Configuration metadata is not that guide.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: [email protected]
For queries about this service, please contact Infrastructure at:
[email protected]
