springboot 整合 security + spring-boot-admin 全方位监控(日志在线监控踩坑)

墨蓝 2023-01-19 03:10 12阅读 0赞

# 一、依赖导入 #

## 1) 项目结构 ##

![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80MDQ2MTI4MQ_size_16_color_FFFFFF_t_70][]

## 2) 项目版本依赖 ##

*  spring-boot 版本 2.2.13.RELEASE
 *  spring-boot-admin 版本 2.3.1

pom.xml 导入

<properties>
            <java.version>1.8</java.version>
            <spring-boot-admin.version>2.3.1</spring-boot-admin.version>
        </properties>
    
        <dependencyManagement>
            <dependencies>
                <dependency>
                    <groupId>org.springframework.boot</groupId>
                    <artifactId>spring-boot-dependencies</artifactId>
                    <version>2.2.13.RELEASE</version>
                    <type>pom</type>
                    <scope>import</scope>
                </dependency>
            </dependencies>
        </dependencyManagement>
        
        <dependencies>
            <dependency>
                <groupId>org.springframework.boot</groupId>
                <artifactId>spring-boot-starter-actuator</artifactId>
            </dependency>
            <dependency>
                <groupId>org.springframework.boot</groupId>
                <artifactId>spring-boot-starter-security</artifactId>
            </dependency>
            <dependency>
                <groupId>org.springframework.boot</groupId>
                <artifactId>spring-boot-starter-web</artifactId>
            </dependency>
            <dependency>
                <groupId>de.codecentric</groupId>
                <artifactId>spring-boot-admin-starter-client</artifactId>
                <version>${spring-boot-admin.version}</version>
            </dependency>
            <dependency>
                <groupId>de.codecentric</groupId>
                <artifactId>spring-boot-admin-starter-server</artifactId>
                <version>${spring-boot-admin.version}</version>
            </dependency>
    
            <dependency>
                <groupId>org.projectlombok</groupId>
                <artifactId>lombok</artifactId>
                <optional>true</optional>
            </dependency>
        </dependencies>

# 二、项目配置 #

AdminServerConfig.java  admin服务配置类

/**
     * admin服务配置类
     * @author Lion Li
     * @date 2021-5-7
     */
    @Configuration
    @EnableAdminServer
    public class AdminServerConfig {
    
        @Lazy
        @Bean(name = TaskExecutionAutoConfiguration.APPLICATION_TASK_EXECUTOR_BEAN_NAME)
        @ConditionalOnMissingBean(Executor.class)
        public ThreadPoolTaskExecutor applicationTaskExecutor(TaskExecutorBuilder builder) {
            return builder.build();
        }
    }

SecurityConfig.java  权限框架配置类

/**
     * 权限框架配置类
     * @author Lion Li
     * @date 2021-5-7
     */
    @EnableGlobalMethodSecurity(prePostEnabled = true, securedEnabled = true)
    public class SecurityConfig extends WebSecurityConfigurerAdapter {
    
        @Autowired
        private AdminServerProperties adminServerProperties;
    
        @Override
        protected void configure(HttpSecurity httpSecurity) throws Exception {
            httpSecurity
                    .csrf().disable()
                    // 过滤请求
                    .authorizeRequests()
                    // 对于登录login 允许匿名访问
                    .antMatchers("/login").anonymous()
    
                    // Spring Boot Admin Server 的安全配置
                    .antMatchers(adminServerProperties.getContextPath()).anonymous()
                    .antMatchers(adminServerProperties.getContextPath() + "/**").anonymous()
                    // Spring Boot Actuator 的安全配置
                    .antMatchers("/actuator").anonymous()
                    .antMatchers("/actuator/**").anonymous()
                    // 除上面外的所有请求全部需要鉴权认证
                    .anyRequest().authenticated()
                    .and()
                    .headers().frameOptions().disable();
        }
    
    }

application.yml  项目配置文件(注意此处分两种配置 (1) 使用xml日志配置文件 (2) 不使用日志配置文件 请仔细观看配置注释)

server:
      # 服务器的HTTP端口，默认为8080
      port: 8080
    
    # 日志配置
    logging:
      # 已存在日志xml配置文件后，path与name 不生效
      # 需使用config指定配置文件位置
      #  file:
      #    path: ./logs/
      #    name: sys-console.log
      config: classpath:logback.xml
    
    spring:
      application:
        name: springboot-admin-demo
      boot:
        admin:
          # Spring Boot Admin Client 客户端的相关配置
          client:
            # 设置 Spring Boot Admin Server 地址
            url: http://localhost:${server.port}${spring.boot.admin.context-path}
            instance:
              prefer-ip: true # 注册实例时，优先使用 IP
          # Spring Boot Admin Server 服务端的相关配置
          context-path: /admin # 配置 Spring
    
    # Actuator 监控端点的配置项
    management:
      endpoints:
        web:
          # Actuator 提供的 API 接口的根目录。默认为 /actuator
          base-path: /actuator
          exposure:
            # 需要开放的端点。默认值只打开 health 和 info 两个端点。通过设置 * ，可以开放所有端点。
            include: '*'
      # 已存在日志xml配置文件后，需要配置该项
      endpoint:
        logfile:
          external-file: ./logs/sys-console.log

logback.xml 日志配置文件

<?xml version="1.0" encoding="UTF-8"?>
    <configuration>
        <property name="log.path" value="./logs"/>
        <property name="console.log.pattern"
                  value="%red(%d{yyyy-MM-dd HH:mm:ss}) %green([%thread]) %highlight(%-5level) %boldMagenta(%logger{36}%n) - %msg%n"/>
        <property name="log.pattern" value="%d{yyyy-MM-dd HH:mm:ss} [%thread] %-5level %logger{36} - %msg%n"/>
    
    	
    	<appender name="console" class="ch.qos.logback.core.ConsoleAppender">
    		<encoder>
    			<pattern>${console.log.pattern}</pattern>
                <charset>utf-8</charset>
    		</encoder>
    	</appender>
    
        
        <appender name="file_console" class="ch.qos.logback.core.FileAppender">
            <file>${log.path}/sys-console.log</file>
            <encoder>
                <pattern>${log.pattern}</pattern>
                <charset>utf-8</charset>
            </encoder>
            <filter class="ch.qos.logback.classic.filter.ThresholdFilter">
                
                <level>INFO</level>
            </filter>
        </appender>
    
    	<root level="info">
    		<appender-ref ref="console" />
    	</root>
    	
    	
        <root level="info">
            <appender-ref ref="file_console" />
        </root>
    
    </configuration>

# 三、测试 #

启动项目 访问如下地址 [http://localhost:8080/admin][http_localhost_8080_admin]

![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80MDQ2MTI4MQ_size_16_color_FFFFFF_t_70 1][]

![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80MDQ2MTI4MQ_size_16_color_FFFFFF_t_70 2][]

![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80MDQ2MTI4MQ_size_16_color_FFFFFF_t_70 3][]

项目已上传到gitee

地址: [springboot-admin-demo][]

如果帮到您了,请帮忙点个star

[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80MDQ2MTI4MQ_size_16_color_FFFFFF_t_70]: /images/20221021/ae78331d7ed841aeacca4f7924f27429.png
[http_localhost_8080_admin]: http://localhost:8082/admin/applications
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80MDQ2MTI4MQ_size_16_color_FFFFFF_t_70 1]: /images/20221021/b1bb7b0839f94e4fbd522e9064f7e770.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80MDQ2MTI4MQ_size_16_color_FFFFFF_t_70 2]: /images/20221021/615c08c282d74d4c994d7097bd8da4f9.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80MDQ2MTI4MQ_size_16_color_FFFFFF_t_70 3]: /images/20221021/e2791885a9c046a6927984a83dc78b8c.png
[springboot-admin-demo]: https://gitee.com/JavaLionLi/LionLi-Labs/tree/master/springboot-admin-demo