ruanwenjun opened a new issue, #18582: URL: https://github.com/apache/dolphinscheduler/issues/18582
### Search before asking - [x] I had searched in the issues and found no similar issues. ### What happened Actuator access rules use servlet request URI prefix matching, while Spring Boot routes requests through registered endpoint mappings. These matching strategies can handle equivalent endpoint paths inconsistently. ### What you expected to happen Requests resolved to the same registered Actuator endpoint should use the same authentication and configured exclusion rules. ### How to reproduce 1. Enable Actuator endpoint authentication and expose the Prometheus endpoint. 2. Request the endpoint through equivalent URI representations. 3. Compare the access decisions for requests resolved to the same endpoint. ### Anything else Actuator access rules should use Spring Boot registered endpoint matching. ### Version dev ### Are you willing to submit PR? - [x] Yes I am willing to submit a PR! ### Code of Conduct - [x] I agree to follow this projects Code of Conduct. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
