EndpointRequest uses empty servlet path if not available

Fixes gh-13399

Author: mbhave

spring-boot-project/spring-boot-actuator-autoconfigure/src/main/java/org/springframework/boot/actuate/autoconfigure/security/servlet/EndpointRequest.java

@@ -137,16 +137,27 @@ protected final boolean matches(HttpServletRequest request,
 
 		private RequestMatcher createDelegate(WebApplicationContext context) {
 			try {
-				RequestMatcherFactory requestMatcherFactory = new RequestMatcherFactory(
-						context.getBean(DispatcherServletPathProvider.class)
-								.getServletPath());
+				String servletPath = getServletPath(context);
+				RequestMatcherFactory requestMatcherFactory = (StringUtils
+						.hasText(servletPath) ? new RequestMatcherFactory(servletPath)
+								: RequestMatcherFactory.withEmptyServletPath());
 				return createDelegate(context, requestMatcherFactory);
 			}
 			catch (NoSuchBeanDefinitionException ex) {
 				return EMPTY_MATCHER;
 			}
 		}
 
+		private String getServletPath(WebApplicationContext context) {
+			try {
+				return context.getBean(DispatcherServletPathProvider.class)
+						.getServletPath();
+			}
+			catch (NoSuchBeanDefinitionException ex) {
+				return "";
+			}
+		}
+
 		protected abstract RequestMatcher createDelegate(WebApplicationContext context,
 				RequestMatcherFactory requestMatcherFactory);
 
@@ -279,18 +290,25 @@ private static class RequestMatcherFactory {
 
 		private final String servletPath;
 
+		private static final RequestMatcherFactory EMPTY_SERVLET_PATH = new RequestMatcherFactory(
+				"");
+
 		RequestMatcherFactory(String servletPath) {
 			this.servletPath = servletPath;
 		}
 
-		public RequestMatcher antPath(String... parts) {
+		RequestMatcher antPath(String... parts) {
 			String pattern = (this.servletPath.equals("/") ? "" : this.servletPath);
 			for (String part : parts) {
 				pattern += part;
 			}
 			return new AntPathRequestMatcher(pattern);
 		}
 
+		static RequestMatcherFactory withEmptyServletPath() {
+			return EMPTY_SERVLET_PATH;
+		}
+
 	}
 
 }

spring-boot-project/spring-boot-actuator-autoconfigure/src/test/java/org/springframework/boot/actuate/autoconfigure/security/servlet/EndpointRequestTests.java

@@ -86,6 +86,15 @@ public void toAnyEndpointWhenServletPathNotEmptyShouldMatch() {
 		assertMatcher(matcher, "/actuator", "/spring").doesNotMatch("", "/actuator/foo");
 	}
 
+	@Test
+	public void toAnyEndpointWhenDispatcherServletPathProviderNotAvailableUsesEmptyPath() {
+		RequestMatcher matcher = EndpointRequest.toAnyEndpoint();
+		assertMatcher(matcher, "/actuator", null).matches("/actuator/foo");
+		assertMatcher(matcher, "/actuator", null).matches("/actuator/bar");
+		assertMatcher(matcher, "/actuator", null).matches("/actuator");
+		assertMatcher(matcher, "/actuator", null).doesNotMatch("/actuator/baz");
+	}
+
 	@Test
 	public void toEndpointClassShouldMatchEndpointPath() {
 		RequestMatcher matcher = EndpointRequest.to(FooEndpoint.class);
@@ -245,8 +254,10 @@ private RequestMatcherAssert assertMatcher(RequestMatcher matcher,
 				properties.setBasePath(pathMappedEndpoints.getBasePath());
 			}
 		}
-		DispatcherServletPathProvider pathProvider = () -> servletPath;
-		context.registerBean(DispatcherServletPathProvider.class, () -> pathProvider);
+		if (servletPath != null) {
+			DispatcherServletPathProvider pathProvider = () -> servletPath;
+			context.registerBean(DispatcherServletPathProvider.class, () -> pathProvider);
+		}
 		return assertThat(new RequestMatcherAssert(context, matcher));
 	}