SpringCloud+OAuth2统一权限验证

最新推荐文章于 2024-09-06 15:03:42 发布

Y1567409

最新推荐文章于 2024-09-06 15:03:42 发布

阅读量891

点赞数 11

本文链接：https://blog.csdn.net/Y1567409/article/details/137189694

版权

程序员专栏收录该内容

742 篇文章 1 订阅

订阅专栏

#--------------------eureka---------------------
eureka:
instance:
prefer-ip-address: true
instance-id: ${spring.cloud.client.ip-address}:$ {server.port}
client:
service-url:
defaultZone: http://localhost:8090/eureka/

#--------------------Zuul-----------------------
zuul:
routes:
member:
path: /member/**
serviceId: javayh-shop
sensitiveHeaders: “"
auth:
path: /auth/**
serviceId: javayh-oauth
sensitiveHeaders: "”
retryable: false
ignored-services: “*”
ribbon:
eager-load:
enabled: true
host:
connect-timeout-millis: 60000
socket-timeout-millis: 60000
add-proxy-headers: true

#---------------------OAuth2---------------------
security:
oauth2:
client:
access-token-uri: http://localhost: ${server.port}/auth/oauth/token user-authorization-uri: http://localhost:$ {server.port}/auth/oauth/authorize
client-id: web
resource:
user-info-uri: http://localhost:${server.port}/auth/javayh/member
prefer-token-info: false

#----------------------超时配置-------------------
ribbon:
ReadTimeout: 60000
ConnectTimeout: 60000
MaxAutoRetries: 2
MaxAutoRetriesNextServer: 2
eureka:
enabled: true
hystrix:
command:
default:
execution:
timeout:
enabled: true
isolation:
thread:
timeoutInMilliseconds: 60000

pom配置

<?xml version="1.0" encoding="UTF-8"?>

4.0.0

com.javayh
javayh-oauth2
0.0.1-SNAPSHOT

com.javayh
javayh-zuul
0.0.1-SNAPSHOT
javayh-zuul
javayh-zuul

org.springframework.cloud spring-cloud-starter-netflix-zuul org.springframework.cloud spring-cloud-starter-netflix-eureka-client org.springframework.cloud spring-cloud-starter-oauth2 org.springframework.cloud spring-cloud-starter-security org.springframework.boot spring-boot-starter-actuator org.springframework.boot spring-boot-maven-plugin

Security配置

@Configuration
@EnableWebSecurity
@Order(99)//必加
public class SecurityConfig extends WebSecurityConfigurerAdapter {

/**

禁止csrf
@param http
@throws Exception
*/
@Override
protected void configure(HttpSecurity http) throws Exception {
http.csrf().disable();
}
}

认证服务器配置

yaml

摘取自某位大佬的，讲解很详细

server:
port: 8092

spring:
application:
name: javayh-oauth
redis:
database: 0
host: localhost
port: 6379
password:
jedis:
pool:
max-active: 8
max-idle: 8
min-idle: 0
datasource:
driver-class-name: com.mysql.jdbc.Driver
url: jdbc:mysql://localhost:3306/test?useUnicode=true&characterEncoding=utf-8&useSSL=false&allowMultiQueries=true
username: root
password: 1219320
druid:
initialSize: 5 #初始化连接大小
minIdle: 5 #最小连接池数量
maxActive: 20 #最大连接池数量
maxWait: 60000 #获取连接时最大等待时间，单位毫秒
timeBetweenEvictionRunsMillis: 60000 #配置间隔多久才进行一次检测，检测需要关闭的空闲连接，单位是毫秒
minEvictableIdleTimeMillis: 300000 #配置一个连接在池中最小生存的时间，单位是毫秒
validationQuery: SELECT 1 from DUAL #测试连接
testWhileIdle: true #申请连接的时候检测，建议配置为true，不影响性能，并且保证安全性
testOnBorrow: false #获取连接时执行检测，建议关闭，影响性能
testOnReturn: false #归还连接时执行检测，建议关闭，影响性能
poolPreparedStatements: false #是否开启PSCache，PSCache对支持游标的数据库性能提升巨大，oracle建议开启，mysql下建议关闭
maxPoolPreparedStatementPerConnectionSize: 20 #开启poolPreparedStatements后生效
filters: stat,wall,log4j #配置扩展插件，常用的插件有=>stat:监控统计 log4j:日志 wall:防御sql注入
connectionProperties: ‘druid.stat.mergeSql=true;druid.stat.slowSqlMillis=5000’ #通过connectProperties属性来打开mergeSql功能;慢SQL记录

eureka:
instance:
prefer-ip-address: true
instance-id: ${spring.cloud.client.ip-address}:$ {server.port}
client:
service-url:
defaultZone: http://localhost:8090/eureka/

mybatis:
type-aliases-package: com.javayh.entity
configuration:
map-underscore-to-camel-case: true #开启驼峰命名,l_name -> lName
jdbc-type-for-null: NULL
lazy-loading-enabled: true
aggressive-lazy-loading: true
cache-enabled: true #开启二级缓存
call-setters-on-nulls: true #map空列不显示问题
mapper-locations:

classpath:mybatis/*.xml

pom配置

<?xml version="1.0" encoding="UTF-8"?>

4.0.0

com.javayh
javayh-oauth2
0.0.1-SNAPSHOT

com.javayh
javayh-oauth
0.0.1-SNAPSHOT
javayh-oauth
ojavayh-oauth

org.springframework.cloud spring-cloud-starter-netflix-eureka-client org.springframework.cloud spring-cloud-starter-oauth2 org.springframework.cloud spring-cloud-starter-security org.springframework.boot spring-boot-starter-data-redis org.mybatis.spring.boot mybatis-spring-boot-starter 1.3.2 org.springframework.boot spring-boot-starter-actuator mysql mysql-connector-java 5.1.46 com.alibaba druid 1.1.9 log4j log4j 1.2.17 org.springframework.boot spring-boot-maven-plugin

接下来是重点配置

DruidConfiguration

@Slf4j
@Configuration
public class DruidConfiguration {
@Value(“${spring.datasource.url}”)
private String url;

@Value(“${spring.datasource.username}”)
private String username;

@Value(“${spring.datasource.password}”)
private String password;

@Value(“${spring.datasource.driver-class-name}”)
private String driverClassName;

@Value(“${spring.druid.initialSize}”)
private int initialSize;

@Value(“${spring.druid.minIdle}”)
private int minIdle;

@Value(“${spring.druid.maxActive}”)
private int maxActive;

@Value(“${spring.druid.maxWait}”)
private int maxWait;

@Value(“${spring.druid.timeBetweenEvictionRunsMillis}”)
private int timeBetweenEvictionRunsMillis;

@Value(“${spring.druid.minEvictableIdleTimeMillis}”)
private int minEvictableIdleTimeMillis;

@Value(“${spring.druid.validationQuery}”)
private String validationQuery;

@Value(“${spring.druid.testWhileIdle}”)
private boolean testWhileIdle;

@Value(“${spring.druid.testOnBorrow}”)
private boolean testOnBorrow;

@Value(“${spring.druid.testOnReturn}”)
private boolean testOnReturn;

@Value(“${spring.druid.poolPreparedStatements}”)
private boolean poolPreparedStatements;

@Value(“${spring.druid.maxPoolPreparedStatementPerConnectionSize}”)
private int maxPoolPreparedStatementPerConnectionSize;

@Value(“${spring.druid.filters}”)
private String filters;

@Value(“{spring.druid.connectionProperties}”)
private String connectionProperties;

@Bean
@Primary
public DataSource dataSource() {
DruidDataSource datasource = new DruidDataSource();
datasource.setUrl(url);
datasource.setUsername(username);
//这里可以做加密处理
datasource.setPassword(password);
datasource.setDriverClassName(driverClassName);
//configuration
datasource.setInitialSize(initialSize);
datasource.setMinIdle(minIdle);
datasource.setMaxActive(maxActive);
datasource.setMaxWait(maxWait);
datasource.setTimeBetweenEvictionRunsMillis(timeBetweenEvictionRunsMillis);
datasource.setMinEvictableIdleTimeMillis(minEvictableIdleTimeMillis);
datasource.setValidationQuery(validationQuery);
datasource.setTestWhileIdle(testWhileIdle);
datasource.setTestOnBorrow(testOnBorrow);
datasource.setTestOnReturn(testOnReturn);
datasource.setPoolPreparedStatements(poolPreparedStatements);
datasource.setMaxPoolPreparedStatementPerConnectionSize(maxPoolPreparedStatementPerConnectionSize);
try {
datasource.setFilters(filters);
} catch (SQLException e) {
log.info(“连接异常”+e.getMessage());
}
datasource.setConnectionProperties(connectionProperties);
return datasource;
}

@Bean
public FilterRegistrationBean statFilter() {
//创建过滤器
FilterRegistrationBean filterRegistrationBean = new FilterRegistrationBean(new WebStatFilter());
//设置过滤器过滤路径
filterRegistrationBean.addUrlPatterns(“/");
//忽略过滤的形式
filterRegistrationBean.addInitParameter(“exclusions”, ".js,.gif,.jpg,.png,.css,.ico,/druid/”);
return filterRegistrationBean;
}
}