springcloud-eureka集群-整合security安全验证框架

àì夳堔傛蜴生んèń 2022-05-14 01:25 207阅读 0赞

1、继之前的eureka服务中心项目添加依赖

<dependency>
       <groupId>org.springframework.boot</groupId>
       <artifactId>spring-boot-starter-actuator</artifactId>
    </dependency>
    
    
    <dependency>
       <groupId>org.springframework.boot</groupId>
       <artifactId>spring-boot-starter-security</artifactId>
    </dependency>

2、修改application.yml配置

server:
      port: 8761
    spring:
      profiles: eureka-colony1
    eureka:
      instance:
        hostname: eureka-colony1
      client:
        registerWithEureka: false
        fetchRegistry: false
        serviceUrl:
          defaultZone: http://admin:admin@192.168.20.211:8762/eureka/
      server:
        # 关闭自我保护
        enable-self-preservation: false
        # 清理服务器
        eviction-interval-timer-in-ms: 5000
    # 日志输出
    logging:
      file: log-tms-eureka1/logger.log
      level:
        org.springframework.web: DEBUG
    
    # 关闭程序
    endpoints:
      shutdown:
        enabled: true
        sensitive: true
    
    # 关闭项目的安全验证
    security:
      user:
        name: admin
        password: admin
        role: SUPERUSER
    
    # 配置关闭程序的路径
    management:
      context-path: /tms-eureka
      security:
        roles: SUPERUSER #角色
      port: 8761 # 指定端口
      address: 192.168.20.211 # 指定地址
      
    ---
    
    server:
      port: 8762
    spring:
      profiles: eureka-colony2
    eureka:
      instance:
        hostname: eureka-colony2
      client:
        registerWithEureka: false
        fetchRegistry: false
        serviceUrl:
          defaultZone: http://admin:admin@192.168.20.211:8761/eureka/
      server:
        # 关闭自我保护
        enable-self-preservation: false
        # 清理服务器
        eviction-interval-timer-in-ms: 5000
    # 日志输出
    logging:
      file: log-tms-eureka2/logger.log
      level:
        org.springframework.web: DEBUG
    
    # 关闭程序
    endpoints:
      shutdown:
        enabled: true
        sensitive: true
    
    # 关闭项目的安全验证
    security:
      user:
        name: admin
        password: admin
        role: SUPERUSER
    
    # 配置关闭程序的路径
    management:
      context-path: /tms-eureka
      security:
        roles: SUPERUSER #角色
      port: 8762 # 指定端口
      address: 192.168.20.211 # 指定地址

3、修改启动类

public static void main(String[] args) {
    	new SpringApplicationBuilder(EurekaColonyApplication.class).run(args);
    }

4、服务提供者与服务客户端要修改application.yml，修改注册链接，带上用户名密码

# eureka注册中心使用用户名密码，所以这里要带上用户名密码向eureka注册
    defaultZone: http://admin:admin@192.168.1.108:8761/eureka/, http://admin:admin@192.168.1.108:8762/eureka/

5、测试，把项目打包为jar文件，本例使用虚拟机linux系统来跑eureka服务注册中心，将jar文件上传linux服务器。

在pom.xml 中添加

<build>
    	>
    	<finalName>tms-eureka</finalName>
    	<plugins>
    		<plugin>
    			<groupId>org.springframework.boot</groupId>
    			<artifactId>spring-boot-maven-plugin</artifactId>
    			<configuration>
    				<fork>true</fork>
    				
    				<mainClass>com.csdn.EurekaColonyApplication</mainClass>
    			</configuration>
    			<executions>
    				<execution>
    					<goals>
    						<goal>repackage</goal>
    					</goals>
    				</execution>
    			</executions>
    		</plugin>
    	</plugins>
    </build>

启动2次项目：

nohup java -jar /opt/springcloud/tms-eureka/tms-eureka.jar --spring.profiles.active=eureka-colony1 > eureka-colony1.out &
    
    nohup java -jar /opt/springcloud/tms-eureka/tms-eureka.jar --spring.profiles.active=eureka-colony2 > eureka-colony2.out &

![70][]

再启动2个服务提供者，已在eureka注册中心注册

![70 1][]

停止eureka服务注册中心：

curl -u admin:admin -X POST http://192.168.20.211:8761/tms-eureka/shutdown
    
    curl -u admin:admin -X POST http://192.168.20.211:8762/tms-eureka/shutdown

![70 2][]

[70]: /images/20220514/eccdcca433ae47758932fa57ad14ae59.png
[70 1]: /images/20220514/d5a2c20cf6ac4844a471916dfba18fe1.png
[70 2]: /images/20220514/2c8dcb5dd8b243358a161bce138a1960.png