Class DumpsSettings
java.lang.Object
org.apache.juneau.rest.server.management.DumpsSettings
Deny-by-default exposure settings for the diagnostic dump endpoints (
/threaddump, /heapdump).
Both dumps are off by default on security grounds — a thread dump can leak sensitive state and a
heap dump can be large and contain secrets. A consumer opts in explicitly by registering a
DumpsSettings bean (built with DumpsSettings.Builder.enableThreadDump() / DumpsSettings.Builder.enableHeapDump())
in the resource's bean store. When no such bean is present, DumpsManager resolves the default
(both disabled) and the endpoints respond 403 Forbidden.
See Also:
- Since:
- 10.0.0
-
Nested Class Summary
Nested Classes -
Field Summary
FieldsModifier and TypeFieldDescriptionstatic final DumpsSettingsThe default (deny-all) settings used when no bean is registered. -
Method Summary
Modifier and TypeMethodDescriptionstatic DumpsSettings.Buildercreate()Builder creator.booleanboolean
-
Field Details
-
DEFAULT
The default (deny-all) settings used when no bean is registered.
-
-
Method Details
-
create
Builder creator.- Returns:
- A new builder (both dumps disabled).
-
isThreadDumpEnabled
- Returns:
true if the/threaddumpendpoint is enabled.
-
isHeapDumpEnabled
- Returns:
true if the/heapdumpendpoint is enabled.
-