Add Spring Security.

Add test to increase coverage.

Author: mfvanek

buildSrc/src/main/kotlin/sb-ot-demo.java-conventions.gradle.kts

@@ -119,28 +119,28 @@ tasks {
                 limit {
                     counter = "METHOD"
                     value = "MISSEDCOUNT"
-                    maximum = "3.0".toBigDecimal()
+                    maximum = "2.0".toBigDecimal()
                 }
             }
             rule {
                 limit {
                     counter = "LINE"
                     value = "MISSEDCOUNT"
-                    maximum = "10.0".toBigDecimal()
+                    maximum = "7.0".toBigDecimal()
                 }
             }
             rule {
                 limit {
                     counter = "INSTRUCTION"
                     value = "COVEREDRATIO"
-                    minimum = "0.90".toBigDecimal()
+                    minimum = "0.93".toBigDecimal()
                 }
             }
             rule {
                 limit {
                     counter = "BRANCH"
                     value = "COVEREDRATIO"
-                    minimum = "0.65".toBigDecimal()
+                    minimum = "0.66".toBigDecimal()
                 }
             }
         }

spring-boot-2-demo-app/build.gradle.kts

@@ -18,6 +18,7 @@ dependencies {
     implementation("org.springframework.boot:spring-boot-starter-web")
     implementation("org.springframework.boot:spring-boot-starter-webflux")
     implementation("org.springframework.boot:spring-boot-starter-actuator")
+    implementation("org.springframework.boot:spring-boot-starter-security")
     implementation("io.micrometer:micrometer-registry-prometheus")
     implementation("org.springdoc:springdoc-openapi-ui")
 

spring-boot-2-demo-app/src/main/java/io/github/mfvanek/spring/boot2/test/config/SecurityConfig.java

@@ -0,0 +1,26 @@
+/*
+ * Copyright (c) 2020-2025. Ivan Vakhrushev and others.
+ * https://github.com/mfvanek/spring-boot-open-telemetry-demo
+ *
+ * Licensed under the Apache License 2.0
+ */
+
+package io.github.mfvanek.spring.boot2.test.config;
+
+import lombok.SneakyThrows;
+import org.springframework.context.annotation.Bean;
+import org.springframework.context.annotation.Configuration;
+import org.springframework.security.config.annotation.web.builders.HttpSecurity;
+import org.springframework.security.web.SecurityFilterChain;
+
+@Configuration(proxyBeanMethods = false)
+public class SecurityConfig {
+
+    @Bean
+    @SneakyThrows
+    public SecurityFilterChain securityFilterChain(HttpSecurity http) {
+        http.authorizeHttpRequests(authorize ->
+            authorize.anyRequest().permitAll());
+        return http.build();
+    }
+}

spring-boot-2-demo-app/src/test/java/io/github/mfvanek/spring/boot2/test/controllers/RedirectControllerTest.java

@@ -0,0 +1,32 @@
+/*
+ * Copyright (c) 2020-2025. Ivan Vakhrushev and others.
+ * https://github.com/mfvanek/spring-boot-open-telemetry-demo
+ *
+ * Licensed under the Apache License 2.0
+ */
+
+package io.github.mfvanek.spring.boot2.test.controllers;
+
+import io.github.mfvanek.spring.boot2.test.support.TestBase;
+import org.junit.jupiter.api.Test;
+
+import static io.github.mfvanek.spring.boot2.test.filters.TraceIdInResponseServletFilter.TRACE_ID_HEADER_NAME;
+import static org.assertj.core.api.Assertions.assertThat;
+
+class RedirectControllerTest extends TestBase {
+
+    @Test
+    void redirectShouldWork() {
+        final Object result = webTestClient.get()
+            .uri("/redirect")
+            .exchange()
+            .expectStatus().isEqualTo(303)
+            .expectHeader().exists(TRACE_ID_HEADER_NAME)
+            .expectHeader().location("https://www.google.com")
+            .expectBody(Object.class)
+            .returnResult()
+            .getResponseBody();
+        assertThat(result)
+            .isNull();
+    }
+}

spring-boot-3-demo-app/build.gradle.kts

@@ -15,6 +15,7 @@ dependencies {
     implementation("org.springframework.boot:spring-boot-starter-web")
     implementation("org.springframework.boot:spring-boot-starter-webflux")
     implementation("org.springframework.boot:spring-boot-starter-actuator")
+    implementation("org.springframework.boot:spring-boot-starter-security")
     implementation("io.micrometer:micrometer-registry-prometheus")
     implementation("org.springdoc:springdoc-openapi-starter-webmvc-ui")
 

spring-boot-3-demo-app/src/main/java/io/github/mfvanek/spring/boot3/test/config/SecurityConfig.java

@@ -0,0 +1,26 @@
+/*
+ * Copyright (c) 2020-2025. Ivan Vakhrushev and others.
+ * https://github.com/mfvanek/spring-boot-open-telemetry-demo
+ *
+ * Licensed under the Apache License 2.0
+ */
+
+package io.github.mfvanek.spring.boot3.test.config;
+
+import lombok.SneakyThrows;
+import org.springframework.context.annotation.Bean;
+import org.springframework.context.annotation.Configuration;
+import org.springframework.security.config.annotation.web.builders.HttpSecurity;
+import org.springframework.security.web.SecurityFilterChain;
+
+@Configuration(proxyBeanMethods = false)
+public class SecurityConfig {
+
+    @Bean
+    @SneakyThrows
+    public SecurityFilterChain securityFilterChain(HttpSecurity http) {
+        http.authorizeHttpRequests(authorize ->
+            authorize.anyRequest().permitAll());
+        return http.build();
+    }
+}

spring-boot-3-demo-app/src/main/resources/application.yml

@@ -112,6 +112,10 @@ management:
                 - w3c
         sampling:
             probability: 1.0
+    observations:
+        enable:
+            spring:
+                security: false
     otlp:
         tracing:
             endpoint: http://localhost:4317

spring-boot-3-demo-app/src/test/java/io/github/mfvanek/spring/boot3/test/controllers/RedirectControllerTest.java

@@ -0,0 +1,32 @@
+/*
+ * Copyright (c) 2020-2025. Ivan Vakhrushev and others.
+ * https://github.com/mfvanek/spring-boot-open-telemetry-demo
+ *
+ * Licensed under the Apache License 2.0
+ */
+
+package io.github.mfvanek.spring.boot3.test.controllers;
+
+import io.github.mfvanek.spring.boot3.test.support.TestBase;
+import org.junit.jupiter.api.Test;
+
+import static io.github.mfvanek.spring.boot3.test.filters.TraceIdInResponseServletFilter.TRACE_ID_HEADER_NAME;
+import static org.assertj.core.api.Assertions.assertThat;
+
+class RedirectControllerTest extends TestBase {
+
+    @Test
+    void redirectShouldWork() {
+        final Object result = webTestClient.get()
+            .uri("/redirect")
+            .exchange()
+            .expectStatus().isEqualTo(303)
+            .expectHeader().exists(TRACE_ID_HEADER_NAME)
+            .expectHeader().location("https://www.google.com")
+            .expectBody(Object.class)
+            .returnResult()
+            .getResponseBody();
+        assertThat(result)
+            .isNull();
+    }
+}