springdoc.model-and-view-allowed

[jlafuenteriberaLM]

Describe the bug
If property springdoc.show-actuator=true is set and springdoc.model-and-view-allowed=false, ModelAndVew Endpoints are still exposed in swagger.

If property springdoc.show-actuator=false is set and springdoc.model-and-view-allowed=false, ModelAndVew Endpoints are not exposed.

Expected behavior
ModelAndView endpoints should not appear even if springdoc.show-actuator=true.

[bnasslahsen]

Not reproducible
Please Provide a Minimal, Reproducible Example - with HelloController that reproduces the problem.

This ticket will be closed, and can be reopened if the relevant information are provided.

[jlafuenteriberaLM]

Here is and example,
https://github.com/jlafuenteriberaLM/HelloTestSpringDoc

SwaggerURL -> http://localhost:8080/hello/swagger-ui/index.html

If started with this properties:

springdoc.show-actuator=true
springdoc.model-and-view-allowed=false

Actuator endpoint and ModelAndView Enpoint are shown. (ModelAndView should not)

If started with this properties:

springdoc.show-actuator=false
springdoc.model-and-view-allowed=false

Actuator endpoint and ModelAndView Enpoint are not shown.

[bnasslahsen]

@jlafuenteriberaLM,

This will be out of the box for the next release.
The workarounds for now, is to add @Hidden on the method with ModelAndView