Unsecured.urls - what am I missing

I have written a controller (inside our “DataServicesApplication”) that is used for some debugging purposes on the command line.

I have added the path to that controller to the mgmtp.a12.uaa.authentication.unsecured.urls= property. During startup I can see that the property is applied:

INFO c.m.a.u.a.s.i.U.UAA_Config Unsecured URLs [/mydebug/**]. No UAA infrastructure applied.

But I still get a 401/Unauthorized when trying to call that endpoint.

What am I missing? Do I need to configure anything else?

Hi @thomas-soft-grove

One question was whether you added any @PreAuthorize in your endpoint?
If yes then please remove it, if no then please have a call

Thanks,
Nguyen from UAA team

The class only has the @Controller and @RequestMapping. The endpoint methods only have @GetMapping and @ResponseBody annotations

The context in question also needs to be added to:

mgmtp.a12.uaa.authentication.client.rest.delegated-mode-configuration.excluded-contexts