Describe the bug If I change in a client the application name I can get the secrets of another app. Seems like a major security bug. Due to the nature of the current design, an app that is properly authenticated to Config Server, can by changing the app name, get the configuration of another another app.

Comment From: ryanjbaxter

Duplicate of https://github.com/spring-cloud/spring-cloud-config/issues/1796