Browse Source

:zap: 优化功能。 spring boot admin permitall

冷冷 6 năm trước cách đây
mục cha
commit
581071510a

+ 2 - 2
pigx-config/src/main/resources/config/pigx-monitor-dev.yml

@@ -2,5 +2,5 @@ spring:
   # 安全配置
   security:
     user:
-      name: ENC(rZHA4LW5hHmhLAAzJoFNag==)
-      password: ENC(bjeyh+Aeii3kHXkoo00ZUw==)
+      name: ENC(rZHA4LW5hHmhLAAzJoFNag==)     # pigx
+      password: ENC(bjeyh+Aeii3kHXkoo00ZUw==) # pigx

+ 2 - 2
pigx-visual/pigx-monitor/pom.xml

@@ -63,8 +63,8 @@
 		</dependency>
 		<!--security-->
 		<dependency>
-			<groupId>org.springframework.cloud</groupId>
-			<artifactId>spring-cloud-starter-security</artifactId>
+			<groupId>org.springframework.boot</groupId>
+			<artifactId>spring-boot-starter-security</artifactId>
 		</dependency>
 	</dependencies>
 

+ 20 - 21
pigx-visual/pigx-monitor/src/main/java/com/pig4cloud/pigx/monitor/config/WebSecurityConfigurer.java

@@ -24,13 +24,12 @@ import org.springframework.context.annotation.Configuration;
 import org.springframework.security.config.annotation.web.builders.HttpSecurity;
 import org.springframework.security.config.annotation.web.configuration.WebSecurityConfigurerAdapter;
 import org.springframework.security.web.authentication.SavedRequestAwareAuthenticationSuccessHandler;
-import org.springframework.security.web.csrf.CookieCsrfTokenRepository;
 
 /**
  * WebSecurityConfigurer
  *
- * @author: lishangbu
- * @date: 2018/10/8
+ * @author lishangbu
+ * @date 2018/10/8
  */
 @Configuration
 public class WebSecurityConfigurer extends WebSecurityConfigurerAdapter {
@@ -43,24 +42,24 @@ public class WebSecurityConfigurer extends WebSecurityConfigurerAdapter {
 	@Override
 	protected void configure(HttpSecurity http) throws Exception {
 		// @formatter:off
-        SavedRequestAwareAuthenticationSuccessHandler successHandler = new SavedRequestAwareAuthenticationSuccessHandler();
-        successHandler.setTargetUrlParameter("redirectTo");
-        successHandler.setDefaultTargetUrl(adminContextPath + "/");
+		SavedRequestAwareAuthenticationSuccessHandler successHandler = new SavedRequestAwareAuthenticationSuccessHandler();
+		successHandler.setTargetUrlParameter("redirectTo");
+		successHandler.setDefaultTargetUrl(adminContextPath + "/");
 
-        http.authorizeRequests()
-            .antMatchers(adminContextPath + "/assets/**").permitAll()
-            .antMatchers(adminContextPath + "/login").permitAll()
-            .anyRequest().authenticated()
-            .and()
-        .formLogin().loginPage(adminContextPath + "/login").successHandler(successHandler).and()
-        .logout().logoutUrl(adminContextPath + "/logout").and()
-        .httpBasic().and()
-        .csrf()
-            .csrfTokenRepository(CookieCsrfTokenRepository.withHttpOnlyFalse())
-            .ignoringAntMatchers(
-                adminContextPath + "/instances",
-                adminContextPath + "/actuator/**"
-            );
-        // @formatter:on
+		http.authorizeRequests()
+			.antMatchers(adminContextPath + "/assets/**"
+				, adminContextPath + "/login"
+				, adminContextPath + "/actuator/**"
+			).permitAll()
+			.anyRequest().authenticated()
+			.and()
+			.formLogin().loginPage(adminContextPath + "/login")
+			.successHandler(successHandler).and()
+			.logout().logoutUrl(adminContextPath + "/logout")
+			.and()
+			.httpBasic().and()
+			.csrf()
+			.disable();
+		// @formatter:on
 	}
 }