EndpointRequest exposes factory methods for creating security matchers in the context of Actuator endpoints. We should clarify that such matchers are not as focused as method-level security but rely on pattern matching and will match the endpoint path itself ("actuator/endpoint") as well as everything beneath it ("actuator/endpoint/**").
Some endpoints do declare nested paths, others don't. While pattern matching for security matchers is the most popular (and expected) approach, here we should make this behavior more explicit.
EndpointRequestexposes factory methods for creating security matchers in the context of Actuator endpoints. We should clarify that such matchers are not as focused as method-level security but rely on pattern matching and will match the endpoint path itself ("actuator/endpoint") as well as everything beneath it ("actuator/endpoint/**").Some endpoints do declare nested paths, others don't. While pattern matching for security matchers is the most popular (and expected) approach, here we should make this behavior more explicit.