網關作為對外服務,在微服務架構中是一個很重要的組件,主要體現在動態路由和接入鑒權這兩個功能上。現在我們通過Spring Cloud Zuul來實現對之前a-feign-client(參見Greenwich.SR2版本的Spring Cloud Feign實例)調用的路由映射,並對外部請求做一個簡單的鑒權。三板斧祭出:
1、pom里引入spring-cloud-starter-netflix-zuul:
<?xml version="1.0" encoding="UTF-8"?> <project xmlns="http://maven.apache.org/POM/4.0.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 https://maven.apache.org/xsd/maven-4.0.0.xsd"> <modelVersion>4.0.0</modelVersion> <groupId>com.example</groupId> <artifactId>gateway</artifactId> <version>0.0.1-SNAPSHOT</version> <packaging>jar</packaging> <parent> <groupId>org.springframework.boot</groupId> <artifactId>spring-boot-starter-parent</artifactId> <version>2.1.6.RELEASE</version> <relativePath/> <!-- lookup parent from repository --> </parent> <properties> <project.build.sourceEncoding>UTF-8</project.build.sourceEncoding> <java.version>1.8</java.version> </properties> <dependencies> <dependency> <groupId>org.springframework.cloud</groupId> <artifactId>spring-cloud-starter-netflix-zuul</artifactId> </dependency> <dependency> <groupId>org.springframework.cloud</groupId> <artifactId>spring-cloud-starter-netflix-eureka-server</artifactId> </dependency> <dependency> <groupId>org.springframework.boot</groupId> <artifactId>spring-boot-starter-web</artifactId> </dependency> <dependency> <groupId>org.springframework.boot</groupId> <artifactId>spring-boot-starter-test</artifactId> <scope>test</scope> </dependency> <dependencyManagement> <dependencies> <dependency> <groupId>org.springframework.cloud</groupId> <artifactId>spring-cloud-dependencies</artifactId> <version>Greenwich.SR2</version> <type>pom</type> <scope>import</scope> </dependency> </dependencies> </dependencyManagement> <build> <plugins> <plugin> <groupId>org.springframework.boot</groupId> <artifactId>spring-boot-maven-plugin</artifactId> </plugin> </plugins> </build> </project>
2、application:
#本機端口 server.port=8765 #服務名 spring.application.name=api-gateway #注冊中心地址 eureka.client.service-url.defaultZone=http://localhost:8888/eureka/ #路由規則 zuul.routes.hello.path=/hello/** #路由映射 zuul.routes.hello.service-id=a-feign-client
3、主類通過@EnableZuulProxy啟動網關服務,新增一個過濾器SimpleFilter:
package hello; import org.springframework.boot.SpringApplication; import org.springframework.boot.autoconfigure.SpringBootApplication; import org.springframework.cloud.netflix.zuul.EnableZuulProxy; import org.springframework.context.annotation.Bean; import hello.filters.pre.SimpleFilter; @EnableZuulProxy @SpringBootApplication public class GatewayApplication { public static void main(String[] args) { SpringApplication.run(GatewayApplication.class, args); } @Bean public SimpleFilter simpleFilter() { return new SimpleFilter(); } }
package hello.filters.pre; import javax.servlet.http.HttpServletRequest; import com.netflix.zuul.context.RequestContext; import com.netflix.zuul.ZuulFilter; import org.slf4j.Logger; import org.slf4j.LoggerFactory; public class SimpleFilter extends ZuulFilter { private static Logger log = LoggerFactory.getLogger(SimpleFilter.class); @Override public String filterType() { return "pre"; } @Override public int filterOrder() { return 1; } @Override public boolean shouldFilter() { return true; } @Override public Object run() { RequestContext ctx = RequestContext.getCurrentContext(); HttpServletRequest request = ctx.getRequest(); log.info(String.format("%s request to %s", request.getMethod(), request.getRequestURL().toString())); Object accessToken = request.getParameter("accessToken"); if (accessToken == null) { log.warn("access token is empty"); ctx.setSendZuulResponse(false); ctx.setResponseStatusCode(401); ctx.setResponseBody("{\"result\":\"accessToken為空!\"}"); ctx.getResponse().setContentType("text/html;charset=UTF-8"); return null; } log.info("access token ok"); return null; } }
OK,我們在瀏覽器請求http://localhost:8765/hello/consumer/sayHi?name=world看看:
加上accessToken參數(參數值隨便填一個)再請求一次:
我們看到路由和鑒權都實現了。