Enable CORS for "/health" endpoint in Spring Boot Actuator

Question

We want to enable CORS for all GET requests to the /health endpoint provided by Spring Boot Actuator.

We tried adding the following bean without success:

@Bean
public WebMvcConfigurer corsConfigurer() {
    return new WebMvcConfigurerAdapter() {
        @Override
        public void addCorsMappings(CorsRegistry registry) {
            registry.addMapping("/health").allowedMethods("GET");
        }
    };
}

Answer 1

There are a few properties that can be used to enable CORS for the actuator's endpoints. For example, to allow GET requests from example.com in Spring Boot 1.x:

endpoints.cors.allowed-origins=http://example.com
endpoints.cors.allowed-methods=GET

and for Spring Boot 2:

management.endpoints.web.cors.allowed-origins=http://example.com
management.endpoints.web.cors.allowed-methods=GET