Add /management endpoint provided via Spring Actuator

The new endpoint provide metrics including information about application environment, configuration, beans, caches via Spring Actuator. Additional custom endpoints for version info and statistics are available. The endpoint is protected by Spring Security and requires the admin role.

To allow monitoring of metrics, a Prometheus endpoint is provided via Micrometer.

The /management/health endpoint times out at the moment but this is caused by existing issues with beans for external services.

Web API documentation: https://docs.spring.io/spring-boot/docs/2.1.x/actuator-api/html/

Known issue:
Content type application/json may not be set for the Accept header of requests to the management API. Otherwise, only a JSON stub is returned. application/vnd.spring-boot.actuator.v2+json or */* should be used instead.

Refs #16 (closed).

src/main/java/de/thm/arsnova/config/SecurityConfig.java

@@ -32,6 +32,7 @@ import org.pac4j.oidc.client.OidcClient;
 import org.pac4j.oidc.config.OidcConfiguration;
 import org.slf4j.Logger;
 import org.slf4j.LoggerFactory;
+import org.springframework.boot.actuate.autoconfigure.endpoint.web.WebEndpointProperties;
 import org.springframework.boot.context.properties.EnableConfigurationProperties;
 import org.springframework.context.annotation.AdviceMode;
 import org.springframework.context.annotation.Bean;
@@ -145,6 +146,25 @@ public class SecurityConfig extends WebSecurityConfigurerAdapter {
 		}
 	}
 
+	@Configuration
+	@Order(3)
+	@Profile("!test")
+	public class ManagementHttpSecurityConfig extends HttpSecurityConfig {
+		private final String managementPath;
+
+		public ManagementHttpSecurityConfig(final WebEndpointProperties webEndpointProperties) {
+			managementPath = webEndpointProperties.getBasePath();
+		}
+
+		@Override
+		protected void configure(final HttpSecurity http) throws Exception {
+			super.configure(http);
+			http.antMatcher(managementPath);
+			http.authorizeRequests().anyRequest().hasRole("ADMIN");
+			http.sessionManagement().sessionCreationPolicy(SessionCreationPolicy.STATELESS);
+		}
+	}
+
 	@Configuration
 	@Order(2)
 	@Profile("!test")