14. 微服务综合案例2 zipkin dashboard turbine uaa （2刷）

男娘i 2022-09-08 03:42 152阅读 0赞

# 1. zipkin-service工程 #

## pom ##

*  最新版本的 zipkin-server不是这样使用
 *  zipkin server要去官网下jar包
 *  它现在不支持sdk的形式嵌入了

<parent>
            <groupId>org.springframework.boot</groupId>
            <artifactId>spring-boot-starter-parent</artifactId>
            <version>2.1.6.RELEASE</version>
            <relativePath/>
        </parent>
    
    	<spring-cloud.version>Greenwich.SR2</spring-cloud.version>
    
            <dependency>
                <groupId>io.zipkin.java</groupId>
                <artifactId>zipkin-server</artifactId>
                <version>2.11.8</version>
                <exclusions>
                    <exclusion>
                        <groupId>org.apache.logging.log4j</groupId>
                        <artifactId>log4j-slf4j-impl</artifactId>
                    </exclusion>
                </exclusions>
            </dependency>
    
            <dependency>
                <groupId>io.zipkin.java</groupId>
                <artifactId>zipkin-autoconfigure-ui</artifactId>
                <version>2.11.8</version>
            </dependency>
    
    
    		
    
    		starter-web
    		eureka-client
    
            <dependency>
                <groupId>org.springframework.boot</groupId>
                <artifactId>spring-boot-starter-actuator</artifactId>
            </dependency>
    
        </dependencies>

## yaml 和 enable ##

spring:
      application:
        name: zipkin-server
    server:
      port: 9411
    
    eureka:
      client:
        serviceUrl:
          defaultZone: http://localhost:8761/eureka/
    
    #关闭自动收集web请求
    management:
      metrics:
        web:
          server:
            auto-time-requests: false

@EnableEurekaClient
    @EnableZipkinServer //已经过时

# 2. monitoring-server工程 #

## pom ##

<dependency> config
    			<groupId>org.springframework.cloud</groupId>
    			<artifactId>spring-cloud-starter-config</artifactId>
    		</dependency> 
    
    		<dependency> turbine
    			<groupId>org.springframework.cloud</groupId>
    			<artifactId>spring-cloud-starter-netflix-turbine</artifactId>
    		</dependency>
    
    		<dependency> actuator
    			<groupId>org.springframework.boot</groupId>
    			<artifactId>spring-boot-starter-actuator</artifactId>
    		</dependency>
    
    		
    		<dependency>
    			<groupId>org.springframework.cloud</groupId>
    			<artifactId>spring-cloud-starter-netflix-hystrix-dashboard</artifactId>
    		</dependency>
    
    		
    		<dependency>
    			<groupId>org.springframework.cloud</groupId>
    			<artifactId>spring-cloud-starter-netflix-hystrix</artifactId>
    		</dependency>

## yaml 和 main方法 ##

spring:
      application:
        name: monitor-service
      cloud:
        config:
          uri: http://localhost:8769
          fail-fast: true
      profiles:
          active: pro

@SpringBootApplication //boot
    @EnableEurekaClient //eurekaClient
    @EnableDiscoveryClient //服务发现client，上面不用开启了
    @RestController //json controller
    @EnableHystrix //hystrix
    @EnableHystrixDashboard //hystrix dashboard
    @EnableCircuitBreaker //circuit breaker 要在SpringCloud中使用断路器，需要加上
    @EnableTurbine //turbine
    public class MonitorServiceApplication { 
    
    	public static void main(String[] args) { 
    		SpringApplication.run(MonitorServiceApplication.class, args);
    	}
    }

没有这个配置

feign:
      hystrix:
        enabled: true

# 3. uaa-service #

## 流程 ##

1.  浏览器 用户名 + 密码，到 user\_blog， 加入 clientId，请求到 uaa 授权服务器
2.  uaa验证 clientId username 和 pwd，返回JWT
3.  浏览器 得到 userInfo 和 JWT
4.  浏览器 header加入 JWT
5.  user\_blog 解密JWT，验证权限。 有权限 ，返回资源

## pom ##

<dependencies>
    		
    		starter-config
    		starter-web
            
    		<dependency>
    			<groupId>org.springframework.security</groupId>
    			<artifactId>spring-security-jwt</artifactId>
    		</dependency>
    		<dependency>
    			<groupId>org.springframework.security.oauth</groupId>
    			<artifactId>spring-security-oauth2</artifactId>
    		</dependency>
    
    		starter-netflix-eureka-client
    
    		<dependency> jpa
    			<groupId>org.springframework.boot</groupId>
    			<artifactId>spring-boot-starter-data-jpa</artifactId>
    		</dependency>
            
    		starter-actuator
            
    		<dependency>
    			<groupId>mysql</groupId>
    			<artifactId>mysql-connector-java</artifactId>
    		</dependency>
    
    	</dependencies>
    
    	<build>
    		<plugins>
    			<plugin>
    				<groupId>org.springframework.boot</groupId>
    				<artifactId>spring-boot-maven-plugin</artifactId>
    			</plugin>
    			<plugin>
    				<groupId>org.apache.maven.plugins</groupId>
    				<artifactId>maven-resources-plugin</artifactId>
    				<configuration>
    					<nonFilteredFileExtensions> jks
    						<nonFilteredFileExtension>cert</nonFilteredFileExtension>
    						<nonFilteredFileExtension>jks</nonFilteredFileExtension>
    					</nonFilteredFileExtensions>
    				</configuration>
    			</plugin>
    		</plugins>
    	</build>

## yaml ##

spring:
      application:
        name: uaa-service
      cloud:
        config:
          uri: http://localhost:8769
          fail-fast: true
      profiles:
          active: pro
    management:
      security:
        enabled: false #报错

## resources文件下其他代码 ##

fzp-jwt.jks

### logback-spring.xml ###

<?xml version="1.0" encoding="UTF-8"?>
    <configuration>
        <include resource="org/springframework/boot/logging/logback/base.xml" />
        <logger name="org.springframework.web" level="INFO"/>
    
    </configuration>

## 代码 ##

@EnableEurekaClient

### 1. entity ###

#### role ####

@Entity
    public class Role implements GrantedAuthority { 
    
    	@Id
    	@GeneratedValue(strategy = GenerationType.IDENTITY)
    	private Long id;
    
    	@Column(nullable = false)
    	private String name;
    
    	@Override
    	public String getAuthority() { 
    		return name;
    	}
    
    	@Override
    	public String toString() { 
    		return name;
    	}
    }

#### user ####

@Entity
    public class User implements UserDetails, Serializable { 
    	@Id
    	@GeneratedValue(strategy = GenerationType.IDENTITY)
    	private Long id;
    
    	@Column(nullable = false,  unique = true)
    	private String username;
    
    	@Column
    	private String password;
    
    	@ManyToMany(cascade = CascadeType.ALL, fetch = FetchType.EAGER)
    	@JoinTable(name = "user_role", joinColumns = @JoinColumn(name = "user_id", referencedColumnName = "id"),
    			inverseJoinColumns = @JoinColumn(name = "role_id", referencedColumnName = "id"))
    	private List<Role> authorities;
    
    
    	public User() { 
    	}
    
    	public Long getId() { 
    		return id;
    	}
    	public void setId(Long id) { 
    		this.id = id;
    	}
    
    	@Override
    	public Collection<? extends GrantedAuthority> getAuthorities() { 
    		return authorities;
    	}
    
    	public void setAuthorities(List<Role> authorities) { 
    		this.authorities = authorities;
    	}
    
    }

### 2. dao 和 service ###

public interface UserDao extends JpaRepository<User, Long> { 
    
    	User findByUsername(String username);
    }
    
    
    @Service
    public class UserServiceDetail implements UserDetailsService { 
    
        @Autowired
        private UserDao userRepository;
        @Override
        public UserDetails loadUserByUsername(String username) throws UsernameNotFoundException { 
            return userRepository.findByUsername(username);
        }
    }

### 3. config ###

#### oauth2 config继承 Authorization Server Configurer Adapter ####

@Configuration
    @Enable Authorization Server //开启 认证server
    public class OAuth2Config extends Authorization Server Configurer Adapter { 
        @Override //Client Details Service Configurer
        public void configure(ClientDetailsServiceConfigurer clients) throws Exception { 
            clients.inMemory() //内存 
                    .withClient("uaa-service")
                    .secret("123456")
                    .scopes("service")
                    .autoApprove(true)
                    .authorizedGrantTypes("implicit","refresh_token", "password", "authorization_code") //4种都支持
                    .accessTokenValiditySeconds(24*3600);//24小时过期
        }
    
        @Override //Authorization Server Endpoints Configurer
        public void configure(AuthorizationServerEndpointsConfigurer endpoints) throws Exception { 
    	//token Store，jwtToken enhancer
            endpoints.tokenStore(tokenStore()).tokenEnhancer(jwtTokenEnhancer()).authenticationManager(authenticationManager);
        }
    
        @Override//Authorization Server Security Configurer
        public void configure(AuthorizationServerSecurityConfigurer oauthServer) throws Exception { 
            oauthServer
                    .tokenKeyAccess("permitAll()")
                    .checkTokenAccess("isAuthenticated()").allowFormAuthenticationForClients()
                .passwordEncoder(NoOpPasswordEncoder.getInstance());
    
            /** * 这就是为什么以前，可以fein，却不可以 postMMan吧 * 必须设置allowFormAuthenticationForClients 否则没有办法用postman获取token * 也需要指定密码加密方式BCryptPasswordEncoder */
        }
    
        @Autowired
        @Qualifier("authenticationManagerBean")
        private AuthenticationManager authenticationManager;
    
        @Bean //token
        public TokenStore tokenStore() { 
            return new JwtTokenStore(jwtTokenEnhancer());
        }
    
        @Bean
        protected JwtAccessTokenConverter jwtTokenEnhancer() { 
            //得到 key工程
            KeyStoreKeyFactory keyStoreKeyFactory = new KeyStoreKeyFactory(new ClassPathResource("fzp-jwt.jks"), "fzp123".toCharArray());
            //创建 converter
            JwtAccessTokenConverter converter = new JwtAccessTokenConverter();
            //设置 keyPair 。注意 这个.jks，可能已经过期，这里会报错，重新生成
            converter.setKeyPair(keyStoreKeyFactory.getKeyPair("fzp-jwt"));
            
            return converter;
        }
    }

#### resource server配置 Resource Server Configurer Adapter ####

@Configuration
    @EnableResourceServer
    public class ResourceServerConfiguration extends Resource Server Configurer Adapter{ 
        Logger log = LoggerFactory.getLogger(ResourceServerConfiguration.class);
    
        @Override
        public void configure(HttpSecurity http) throws Exception { 
            http
                    .csrf().disable()
                    .authorizeRequests() //下面这些请求，直接放行
                    .regexMatchers(".*swagger.*",".*v2.*",".*webjars.*","/user/login.*","/user/registry.*","/user/test.*",".*actuator.*").permitAll()
                    .antMatchers("/**").authenticated();
    // .antMatchers("/**").permitAll();
        }
    
    }

#### security配置 WebSecurity Configurer Adapter ####

@Configuration
    class WebSecurityConfig extends WebSecurity Configurer Adapter { 
    
        @Override
        @Bean
        public AuthenticationManager authenticationManagerBean() throws Exception { 
            return super.authentication Manager Bean();
        }
    
        @Override
        protected void configure(HttpSecurity http) throws Exception { 
            //CSRF:因为不再依赖于Cookie，所以你就不需要考虑对CSRF（跨站请求伪造）的防范。
            http
                .csrf().disable()
                    .exceptionHandling()
                   // .authenticationEntryPoint((request, response, authException) -> response.sendError(HttpServletResponse.SC_UNAUTHORIZED))
                    .authenticationEntryPoint(new AuthenticationEntryPoint() { 
                        @Override
                        public void commence(HttpServletRequest httpServletRequest, HttpServletResponse httpServletResponse, AuthenticationException e) throws IOException, ServletException { 
                            httpServletResponse.sendError(HttpServletResponse.SC_UNAUTHORIZED); //401
                        }
                    })
                    .and()
                    .authorizeRequests()
                    .antMatchers("/**").authenticated()
                .and()
                    .httpBasic();
        }
    
        @Autowired
        UserServiceDetail userServiceDetail;
        @Override
        protected void configure(AuthenticationManagerBuilder auth) throws Exception { 
            auth.userDetailsService(userServiceDetail)
                    .passwordEncoder(new BCryptPasswordEncoder());
        }
    }

*  UserUtils在后面赋值代码
 *  feign的 /oauth/token，依然在后面复制代码

@FeignClient(value = "uaa-service")
    @PostMapping(value = "/oauth/token")