Public Access
lobo
22bc036c9c
/api/steam/test/{steamId} let anyone query any Steam profile with our API key. /internal/** had no controller but was open for any future one. Actuator now exposes only health, without details. The management block was also indented under endpoints, so show-details never applied.
67 lines
1.5 KiB
YAML
67 lines
1.5 KiB
YAML
spring:
|
|
application:
|
|
name: tbp-core-service
|
|
profiles:
|
|
active: prod
|
|
jpa:
|
|
open-in-view: true
|
|
flyway:
|
|
enabled: true
|
|
baseline-on-migrate: true
|
|
locations: classpath:db/migration
|
|
threads:
|
|
virtual:
|
|
enabled: true
|
|
mvc:
|
|
apiversion:
|
|
use:
|
|
query-parameter: version
|
|
default: "1.0"
|
|
supported: 1.0, 2,0
|
|
|
|
server:
|
|
port: 8090
|
|
|
|
management:
|
|
endpoints:
|
|
web:
|
|
exposure:
|
|
include: health
|
|
endpoint:
|
|
health:
|
|
show-details: never
|
|
security:
|
|
jwt:
|
|
public-key: ${JWT_PUBLIC_KEY}
|
|
app:
|
|
cors:
|
|
allowed-origins: "https://tbp.andreas-dahm.eu"
|
|
steam:
|
|
api-key: ${STEAM_API_KEY}
|
|
base-url: https://api.steampowered.com
|
|
imageService-url: https://cdn.cloudflare.steamstatic.com/steam/apps/
|
|
library:
|
|
sync-ttl-hours: 24
|
|
force-sync-cooldown-seconds: 60
|
|
running-stale-minutes: 5
|
|
achievement-ttl-hours: 1
|
|
schema-ttl-days: 30
|
|
|
|
resilience4j:
|
|
retry:
|
|
instances:
|
|
steamApi:
|
|
max-attempts: 3
|
|
wait-duration: 500ms
|
|
enable-exponential-backoff: true
|
|
exponential-backoff-multiplier: 2
|
|
retry-exceptions:
|
|
- org.springframework.web.client.RestClientException
|
|
- org.springframework.web.client.ResourceAccessException
|
|
ratelimiter:
|
|
instances:
|
|
steamApi:
|
|
# Steam allows ~100k req/day. Cap at ~2 req/s to leave headroom for bursts.
|
|
limit-for-period: 2
|
|
limit-refresh-period: 1s
|
|
timeout-duration: 5s |