@dsyer In a use case where an API is only being accessed from RestTemplate internally within the application. Is there a real need to secure the endpoint if the network blocks direct access? Setup is with no route defined to the API within Zuul only using a Eureka aware RestTemplate.
Reason for asking is just to understand if it is really that easy. No JS access to the endpoint is required