Skip to content

feat(security): add ASP.NET Core Authorization Policy Support for Debug Endpoints#111

Merged
georgidhristov merged 1 commit into
mainfrom
release/1.6.3-debug-security
Jun 11, 2026
Merged

feat(security): add ASP.NET Core Authorization Policy Support for Debug Endpoints#111
georgidhristov merged 1 commit into
mainfrom
release/1.6.3-debug-security

Conversation

@georgidhristov

Copy link
Copy Markdown
Collaborator

Closes #96

Summary

Add support for protecting DebugProbe UI and API endpoints using ASP.NET Core authorization policies.

Changes

  • Added AuthorizationPolicy option to DebugProbeOptions
  • Added app.UseDebugProbe(options => { ... }) configuration support
  • Applied authorization policies to DebugProbe endpoints when configured
  • Added default ignored probe paths:
    • /health
    • /healthz
    • /ready
    • /live
  • Updated documentation and security guidance
  • Added automated tests for authorization and default ignore behavior

Protected Endpoints

  • /debug
  • /debug/{id}
  • /debug/json/{id}
  • /debug/clear
  • /debug/environment
  • /debug/compare/{id}
  • /compare
  • /debug/js/*
  • /debug/logo.png
  • /debug/favicon.ico

Example

app.UseDebugProbe(options =>
{
    options.AuthorizationPolicy = "DebugProbePolicy";
});

Validation

  • All tests passing (49/49)
  • Authorization policy behavior covered by automated tests
  • Default health endpoint exclusions verified by tests

@georgidhristov georgidhristov merged commit 15eee60 into main Jun 11, 2026
1 check passed
@georgidhristov georgidhristov deleted the release/1.6.3-debug-security branch June 11, 2026 09:16
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Add ASP.NET Core Authorization Policy Support for Debug Endpoints

1 participant