Spring Boot REST starters and REST API config

Flowable Engine
1

I’ve setup a new Spring Boot app as described here, using the below starters, and have confirmed that the endpoints are accessible.

  • flowable-spring-boot-starter-rest
  • flowable-spring-boot-starter-actuator

However, I’m a little confused about what relationship, if any, exists between what is provided by these starters and the REST API described here. After examining the code, it seems that the Rest App properties and security config do not apply in anyway to what is deployed via the REST Starters.

As a result, it seems to me that projects leveraging flowable-spring-boot-starter-rest will need to roll their own SecurityConfiguration. Just looking for confirmation that my understanding is correct.

Thanks in advance for your guidance.

2

Correct, the link you shared to a SecurityConfiguration is part of flowable-app-rest, which includes the starter and adds things like the security. If you’re building your own project and depend on the starter-rest, regular Spring Boot things apply like adding your own SecurityConfiguration.