title: UI microservice - No security are there any implications?
body: <p>This is probably super dumb.</p>
  
  <p><strong>Are their any implications</strong> of having a Microservice that simply serves a UI with no security?</p>
  
  <p>I have security at the gateway level, the UI microservice simply serves the web app, there's nothing in the app that i would like to protect. I could go as far as ensuring that only the gateway can call it directly no other origin is allowed access.</p>
  
  <p>I have Spring-Security on my class path but i've disabled it using:</p>
  
  <p>application.yml</p>
  
  <pre><code>security:
    basic:
      enabled: false
  
  management:
    security:
      enabled: false
  </code></pre>
  
  <p>I haven't made any configuration changes to the security config for example this service has no class that extends <code>WebSecurityConfigurerAdapter</code>.</p>
  
  <p>This service doesn't call anything else it just serves an Angular application contained in <code>/resource/public</code> with:</p>
  
  <pre><code>@RestController
  public class AngularApplicationController {
  
        // serve UI
        @GetMapping(value = "/{path:[^\\.]*}")
        public String redirect() {
          return "forward:/";
        }
  
  }
  </code></pre>