Service Broker Security
Authentication and authorization of service broker endpoints is not specified in the Open Service Broker API specification, but some platforms require or allow basic authentication or OAuth2 credentials to be provided when a service broker is registered to the platform.
The Spring Cloud Open Service Broker project does not implement any security configuration.
Service broker application endpoints can be secured using Spring Security
and Spring Boot security configuration
by applying security to application endpoints with the path-matching pattern /v2/**
.
Example Configuration
Unresolved directive in service-broker-security.adoc - include::{examples-dir}/ExampleSecurityConfig.java[]