1. pom 加入 security
<!-- 加入密码认证 --> <dependency> <groupId>org.springframework.boot</groupId> <artifactId>spring-boot-starter-security</artifactId> </dependency>2.加入配置类 SecuritySecureConfig
package org.fh.config; import org.springframework.context.annotation.Configuration; import org.springframework.security.config.annotation.web.builders.HttpSecurity; import org.springframework.security.config.annotation.web.configuration.WebSecurityConfigurerAdapter; import org.springframework.security.web.authentication.SavedRequestAwareAuthenticationSuccessHandler; import de.codecentric.boot.admin.server.config.AdminServerProperties; /** * 说明：SecuritySecure配置 * 作者：FH Admin * from：fhadmin.cn */ @Configuration public class SecuritySecureConfig extends WebSecurityConfigurerAdapter { private final String adminContextPath; public SecuritySecureConfig(AdminServerProperties adminServerProperties) { this.adminContextPath = adminServerProperties.getContextPath(); } @Override protected void configure(HttpSecurity http) throws Exception { SavedRequestAwareAuthenticationSuccessHandler successHandler = new SavedRequestAwareAuthenticationSuccessHandler(); successHandler.setTargetUrlParameter("redirectTo"); http.headers().frameOptions().disable(); http.authorizeRequests().antMatchers(adminContextPath + "/assets/**",adminContextPath + "/actuator/**").permitAll() .antMatchers(adminContextPath + "/login").permitAll().anyRequest().authenticated().and().formLogin() .loginPage(adminContextPath + "/login").successHandler(successHandler).and().logout() .logoutUrl(adminContextPath + "/logout").and().httpBasic().and().csrf().disable(); } } 3. 配置application.properties
#开启安全认证 用户名和密码 spring.security.user.name=fhadmin spring.security.user.password=root spring.security.basic.enabled=true
当前最新框架组合方案-------------------------------------------------------------------------------------
(后台框架 ：springcloud 2021.0.1 + springcloud Alibaba 2021.0.1.0 + springboot 2.6.5 + flowable6.7.2 流程引擎 )
springcloud服务 （fhadmin.cn）
1 .nacos 阿里注册中心：官方eureka停止更新，目前比较好的取代者就是nacos
2. zipkin 跟踪服务：分布式跟踪日志,基于内存存储记录
3 .gateway 网关路由服务：分发请求，统一管理过滤，结合 LoadBalancer负载均衡、 feign服务调用
4. springboot-admin 监控中心服务：统一界面管理，查看各个服务运行状态 actuator健康检查
5. sentinel 高可用流量管理框架： 以流量为切入点，限流、流量整形、熔断降级、系统负载保护、热点防护