Chapter 4. Securing the Management Console

download PDF


The default setting for Access-Control-Allow-Origin header for the AMQ Management Console permits unrestricted sharing. To restrict access to the AMQ Management Console, create an access management file which contains a list of the allowed origin URLs. To implement the restrictions, add a system property that references the access management file

4.1. Controlling Access to the Fuse Management Console

Create an access management file called access-management.xml in <installDir>/etc/. The access management file must contain <allow-origin> sections within a <cors> section. The <allow-origin> section can contain the origin URL provided by browsers with the Origin: header, or a wildcard specification with *. For example:
   <!-- Allow cross origin access from ... -->
   <!-- ... and all servers from with any protocol -->
   <!-- optionally allow access to web console from localhost -->
   <!-- Check for the proper origin on the server side, too -->
Add the following line to AMQ config script ./bin/setenv, adding the path to the access management file.
export EXTRA_JAVA_OPTS='-Djolokia.policyLocation=file:etc/access-management.xml'
When the command ./bin/fuse is executed, the access management file is referenced and used to restrict access to the AMQ Management Console.
Red Hat logoGithubRedditYoutubeTwitter


Try, buy, & sell


About Red Hat Documentation

We help Red Hat users innovate and achieve their goals with our products and services with content they can trust.

Making open source more inclusive

Red Hat is committed to replacing problematic language in our code, documentation, and web properties. For more details, see the Red Hat Blog.

About Red Hat

We deliver hardened solutions that make it easier for enterprises to work across platforms and environments, from the core datacenter to the network edge.

© 2024 Red Hat, Inc.