From af08632c37b10c0927cf3fb9c75fac0d3a58b9f1 Mon Sep 17 00:00:00 2001 From: 疯狂的狮子Li <15040126243@163.com> Date: 星期一, 10 七月 2023 18:20:05 +0800 Subject: [PATCH] add 新增 请求加密传输 合并优化 !pr377 --- ruoyi-admin/src/main/resources/application.yml | 397 ++++++++++++++++++++++++++++++++++++++------------------ 1 files changed, 266 insertions(+), 131 deletions(-) diff --git a/ruoyi-admin/src/main/resources/application.yml b/ruoyi-admin/src/main/resources/application.yml index 12bf131..03ca7ea 100644 --- a/ruoyi-admin/src/main/resources/application.yml +++ b/ruoyi-admin/src/main/resources/application.yml @@ -1,131 +1,266 @@ -# 椤圭洰鐩稿叧閰嶇疆 -ruoyi: - # 鍚嶇О - name: RuoYi - # 鐗堟湰 - version: 3.8.3 - # 鐗堟潈骞翠唤 - copyrightYear: 2022 - # 瀹炰緥婕旂ず寮�鍏� - demoEnabled: true - # 鏂囦欢璺緞 绀轰緥锛� Windows閰嶇疆D:/ruoyi/uploadPath锛孡inux閰嶇疆 /home/ruoyi/uploadPath锛� - profile: D:/ruoyi/uploadPath - # 鑾峰彇ip鍦板潃寮�鍏� - addressEnabled: false - # 楠岃瘉鐮佺被鍨� math 鏁扮粍璁$畻 char 瀛楃楠岃瘉 - captchaType: math - -# 寮�鍙戠幆澧冮厤缃� -server: - # 鏈嶅姟鍣ㄧ殑HTTP绔彛锛岄粯璁や负8080 - port: 8080 - servlet: - # 搴旂敤鐨勮闂矾寰� - context-path: / - tomcat: - # tomcat鐨刄RI缂栫爜 - uri-encoding: UTF-8 - # 杩炴帴鏁版弧鍚庣殑鎺掗槦鏁帮紝榛樿涓�100 - accept-count: 1000 - threads: - # tomcat鏈�澶х嚎绋嬫暟锛岄粯璁や负200 - max: 800 - # Tomcat鍚姩鍒濆鍖栫殑绾跨▼鏁帮紝榛樿鍊�10 - min-spare: 100 - -# 鏃ュ織閰嶇疆 -logging: - level: - com.ruoyi: debug - org.springframework: warn - -# 鐢ㄦ埛閰嶇疆 -user: - password: - # 瀵嗙爜鏈�澶ч敊璇鏁� - maxRetryCount: 5 - # 瀵嗙爜閿佸畾鏃堕棿锛堥粯璁�10鍒嗛挓锛� - lockTime: 10 - -# Spring閰嶇疆 -spring: - # 璧勬簮淇℃伅 - messages: - # 鍥介檯鍖栬祫婧愭枃浠惰矾寰� - basename: i18n/messages - profiles: - active: druid - # 鏂囦欢涓婁紶 - servlet: - multipart: - # 鍗曚釜鏂囦欢澶у皬 - max-file-size: 10MB - # 璁剧疆鎬讳笂浼犵殑鏂囦欢澶у皬 - max-request-size: 20MB - # 鏈嶅姟妯″潡 - devtools: - restart: - # 鐑儴缃插紑鍏� - enabled: true - # redis 閰嶇疆 - redis: - # 鍦板潃 - host: localhost - # 绔彛锛岄粯璁や负6379 - port: 6379 - # 鏁版嵁搴撶储寮� - database: 0 - # 瀵嗙爜 - password: - # 杩炴帴瓒呮椂鏃堕棿 - timeout: 10s - lettuce: - pool: - # 杩炴帴姹犱腑鐨勬渶灏忕┖闂茶繛鎺� - min-idle: 0 - # 杩炴帴姹犱腑鐨勬渶澶х┖闂茶繛鎺� - max-idle: 8 - # 杩炴帴姹犵殑鏈�澶ф暟鎹簱杩炴帴鏁� - max-active: 8 - # #杩炴帴姹犳渶澶ч樆濉炵瓑寰呮椂闂达紙浣跨敤璐熷�艰〃绀烘病鏈夐檺鍒讹級 - max-wait: -1ms - -# token閰嶇疆 -token: - # 浠ょ墝鑷畾涔夋爣璇� - header: Authorization - # 浠ょ墝瀵嗛挜 - secret: abcdefghijklmnopqrstuvwxyz - # 浠ょ墝鏈夋晥鏈燂紙榛樿30鍒嗛挓锛� - expireTime: 30 - -# MyBatis閰嶇疆 -mybatis: - # 鎼滅储鎸囧畾鍖呭埆鍚� - typeAliasesPackage: com.ruoyi.**.domain - # 閰嶇疆mapper鐨勬壂鎻忥紝鎵惧埌鎵�鏈夌殑mapper.xml鏄犲皠鏂囦欢 - mapperLocations: classpath*:mapper/**/*Mapper.xml - # 鍔犺浇鍏ㄥ眬鐨勯厤缃枃浠� - configLocation: classpath:mybatis/mybatis-config.xml - -# PageHelper鍒嗛〉鎻掍欢 -pagehelper: - helperDialect: mysql - supportMethodsArguments: true - params: count=countSql - -# Swagger閰嶇疆 -swagger: - # 鏄惁寮�鍚痵wagger - enabled: true - # 璇锋眰鍓嶇紑 - pathMapping: /dev-api - -# 闃叉XSS鏀诲嚮 -xss: - # 杩囨护寮�鍏� - enabled: true - # 鎺掗櫎閾炬帴锛堝涓敤閫楀彿鍒嗛殧锛� - excludes: /system/notice - # 鍖归厤閾炬帴 - urlPatterns: /system/*,/monitor/*,/tool/* +# 椤圭洰鐩稿叧閰嶇疆 +ruoyi: + # 鍚嶇О + name: RuoYi-Vue-Plus + # 鐗堟湰 + version: ${revision} + # 鐗堟潈骞翠唤 + copyrightYear: 2023 + # 瀹炰緥婕旂ず寮�鍏� + demoEnabled: true + # 鑾峰彇ip鍦板潃寮�鍏� + addressEnabled: true + +captcha: + enable: true + # 椤甸潰 <鍙傛暟璁剧疆> 鍙紑鍚叧闂� 楠岃瘉鐮佹牎楠� + # 楠岃瘉鐮佺被鍨� math 鏁扮粍璁$畻 char 瀛楃楠岃瘉 + type: MATH + # line 绾挎骞叉壈 circle 鍦嗗湀骞叉壈 shear 鎵洸骞叉壈 + category: CIRCLE + # 鏁板瓧楠岃瘉鐮佷綅鏁� + numberLength: 1 + # 瀛楃楠岃瘉鐮侀暱搴� + charLength: 4 + +# 寮�鍙戠幆澧冮厤缃� +server: + # 鏈嶅姟鍣ㄧ殑HTTP绔彛锛岄粯璁や负8080 + port: 8080 + servlet: + # 搴旂敤鐨勮闂矾寰� + context-path: / + # undertow 閰嶇疆 + undertow: + # HTTP post鍐呭鐨勬渶澶уぇ灏忋�傚綋鍊间负-1鏃讹紝榛樿鍊间负澶у皬鏄棤闄愮殑 + max-http-post-size: -1 + # 浠ヤ笅鐨勯厤缃細褰卞搷buffer,杩欎簺buffer浼氱敤浜庢湇鍔″櫒杩炴帴鐨処O鎿嶄綔,鏈夌偣绫讳技netty鐨勬睜鍖栧唴瀛樼鐞� + # 姣忓潡buffer鐨勭┖闂村ぇ灏�,瓒婂皬鐨勭┖闂磋鍒╃敤瓒婂厖鍒� + buffer-size: 512 + # 鏄惁鍒嗛厤鐨勭洿鎺ュ唴瀛� + direct-buffers: true + threads: + # 璁剧疆IO绾跨▼鏁�, 瀹冧富瑕佹墽琛岄潪闃诲鐨勪换鍔�,瀹冧滑浼氳礋璐e涓繛鎺�, 榛樿璁剧疆姣忎釜CPU鏍稿績涓�涓嚎绋� + io: 8 + # 闃诲浠诲姟绾跨▼姹�, 褰撴墽琛岀被浼約ervlet璇锋眰闃诲鎿嶄綔, undertow浼氫粠杩欎釜绾跨▼姹犱腑鍙栧緱绾跨▼,瀹冪殑鍊艰缃彇鍐充簬绯荤粺鐨勮礋杞� + worker: 256 + +# 鏃ュ織閰嶇疆 +logging: + level: + org.dromara: @logging.level@ + org.springframework: warn + config: classpath:logback-plus.xml + +# 鐢ㄦ埛閰嶇疆 +user: + password: + # 瀵嗙爜鏈�澶ч敊璇鏁� + maxRetryCount: 5 + # 瀵嗙爜閿佸畾鏃堕棿锛堥粯璁�10鍒嗛挓锛� + lockTime: 10 + +# Spring閰嶇疆 +spring: + application: + name: ${ruoyi.name} + # 璧勬簮淇℃伅 + messages: + # 鍥介檯鍖栬祫婧愭枃浠惰矾寰� + basename: i18n/messages + profiles: + active: @profiles.active@ + # 鏂囦欢涓婁紶 + servlet: + multipart: + # 鍗曚釜鏂囦欢澶у皬 + max-file-size: 10MB + # 璁剧疆鎬讳笂浼犵殑鏂囦欢澶у皬 + max-request-size: 20MB + mvc: + format: + date-time: yyyy-MM-dd HH:mm:ss + jackson: + # 鏃ユ湡鏍煎紡鍖� + date-format: yyyy-MM-dd HH:mm:ss + serialization: + # 鏍煎紡鍖栬緭鍑� + indent_output: false + # 蹇界暐鏃犳硶杞崲鐨勫璞� + fail_on_empty_beans: false + deserialization: + # 鍏佽瀵硅薄蹇界暐json涓笉瀛樺湪鐨勫睘鎬� + fail_on_unknown_properties: false + +# Sa-Token閰嶇疆 +sa-token: + # token鍚嶇О (鍚屾椂涔熸槸cookie鍚嶇О) + token-name: Authorization + # token鍥哄畾瓒呮椂 璁句负涓冨ぉ (蹇呭畾杩囨湡) 鍗曚綅: 绉� + timeout: 604800 + # 澶氱涓嶅悓 token 鏈夋晥鏈� 鍙煡鐪� LoginHelper.loginByDevice 鏂规硶鑷畾涔� + # token鏈�浣庢椿璺冩椂闂� (鎸囧畾鏃堕棿鏃犳搷浣滃氨杩囨湡) 鍗曚綅: 绉� + active-timeout: 1800 + # 鏄惁鍏佽鍚屼竴璐﹀彿骞跺彂鐧诲綍 (涓簍rue鏃跺厑璁镐竴璧风櫥褰�, 涓篺alse鏃舵柊鐧诲綍鎸ゆ帀鏃х櫥褰�) + is-concurrent: true + # 鍦ㄥ浜虹櫥褰曞悓涓�璐﹀彿鏃讹紝鏄惁鍏辩敤涓�涓猼oken (涓簍rue鏃舵墍鏈夌櫥褰曞叡鐢ㄤ竴涓猼oken, 涓篺alse鏃舵瘡娆$櫥褰曟柊寤轰竴涓猼oken) + is-share: false + # jwt绉橀挜 + jwt-secret-key: abcdefghijklmnopqrstuvwxyz + +# security閰嶇疆 +security: + # 鎺掗櫎璺緞 + excludes: + # 闈欐�佽祫婧� + - /*.html + - /**/*.html + - /**/*.css + - /**/*.js + # 鍏叡璺緞 + - /favicon.ico + - /error + # swagger 鏂囨。閰嶇疆 + - /*/api-docs + - /*/api-docs/** + # actuator 鐩戞帶閰嶇疆 + - /actuator + - /actuator/** + +# 澶氱鎴烽厤缃� +tenant: + # 鏄惁寮�鍚� + enable: true + # 鎺掗櫎琛� + excludes: + - sys_menu + - sys_tenant + - sys_tenant_package + - sys_role_dept + - sys_role_menu + - sys_user_post + - sys_user_role + - sys_client + +# MyBatisPlus閰嶇疆 +# https://baomidou.com/config/ +mybatis-plus: + # 涓嶆敮鎸佸鍖�, 濡傛湁闇�瑕佸彲鍦ㄦ敞瑙i厤缃� 鎴� 鎻愬崌鎵寘绛夌骇 + # 渚嬪 com.**.**.mapper + mapperPackage: org.dromara.**.mapper + # 瀵瑰簲鐨� XML 鏂囦欢浣嶇疆 + mapperLocations: classpath*:mapper/**/*Mapper.xml + # 瀹炰綋鎵弿锛屽涓猵ackage鐢ㄩ�楀彿鎴栬�呭垎鍙峰垎闅� + typeAliasesPackage: org.dromara.**.domain + global-config: + dbConfig: + # 涓婚敭绫诲瀷 + # AUTO 鑷 NONE 绌� INPUT 鐢ㄦ埛杈撳叆 ASSIGN_ID 闆姳 ASSIGN_UUID 鍞竴 UUID + # 濡傞渶鏀逛负鑷 闇�瑕佸皢鏁版嵁搴撹〃鍏ㄩ儴璁剧疆涓鸿嚜澧� + idType: ASSIGN_ID + +# 鏁版嵁鍔犲瘑 +mybatis-encryptor: + # 鏄惁寮�鍚姞瀵� + enable: false + # 榛樿鍔犲瘑绠楁硶 + algorithm: BASE64 + # 缂栫爜鏂瑰紡 BASE64/HEX銆傞粯璁ASE64 + encode: BASE64 + # 瀹夊叏绉橀挜 瀵圭О绠楁硶鐨勭閽� 濡傦細AES锛孲M4 + password: + # 鍏閽� 闈炲绉扮畻娉曠殑鍏閽� 濡傦細SM2锛孯SA + publicKey: + privateKey: + +# api鎺ュ彛鍔犲瘑 +api-decrypt: + # 鏄惁寮�鍚叏灞�鎺ュ彛鍔犲瘑 + enabled: true + # AES 鍔犲瘑澶存爣璇� + headerFlag: encrypt-key + # 鍏閽� 闈炲绉扮畻娉曠殑鍏閽� 濡傦細SM2锛孯SA 浣跨敤鑰呰鑷鏇存崲 + publicKey: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAKoR8mX0rGKLqzcWmOzbfj64K8ZIgOdHnzkXSOVOZbFu/TJhZ7rFAN+eaGkl3C4buccQd/EjEsj9ir7ijT7h96MCAwEAAQ== + privateKey: MIIBVAIBADANBgkqhkiG9w0BAQEFAASCAT4wggE6AgEAAkEAqhHyZfSsYourNxaY7Nt+PrgrxkiA50efORdI5U5lsW79MmFnusUA355oaSXcLhu5xxB38SMSyP2KvuKNPuH3owIDAQABAkAfoiLyL+Z4lf4Myxk6xUDgLaWGximj20CUf+5BKKnlrK+Ed8gAkM0HqoTt2UZwA5E2MzS4EI2gjfQhz5X28uqxAiEA3wNFxfrCZlSZHb0gn2zDpWowcSxQAgiCstxGUoOqlW8CIQDDOerGKH5OmCJ4Z21v+F25WaHYPxCFMvwxpcw99EcvDQIgIdhDTIqD2jfYjPTY8Jj3EDGPbH2HHuffvflECt3Ek60CIQCFRlCkHpi7hthhYhovyloRYsM+IS9h/0BzlEAuO0ktMQIgSPT3aFAgJYwKpqRYKlLDVcflZFCKY7u3UP8iWi1Qw0Y= + +springdoc: + api-docs: + # 鏄惁寮�鍚帴鍙f枃妗� + enabled: true + swagger-ui: + # 鎸佷箙鍖栬璇佹暟鎹� + persistAuthorization: true + info: + # 鏍囬 + title: '鏍囬锛�${ruoyi.name}澶氱鎴风鐞嗙郴缁焈鎺ュ彛鏂囨。' + # 鎻忚堪 + description: '鎻忚堪锛氱敤浜庣鐞嗛泦鍥㈡棗涓嬪叕鍙哥殑浜哄憳淇℃伅,鍏蜂綋鍖呮嫭XXX,XXX妯″潡...' + # 鐗堟湰 + version: '鐗堟湰鍙�: ${ruoyi.version}' + # 浣滆�呬俊鎭� + contact: + name: Lion Li + email: crazylionli@163.com + url: https://gitee.com/dromara/RuoYi-Vue-Plus + components: + # 閴存潈鏂瑰紡閰嶇疆 + security-schemes: + apiKey: + type: APIKEY + in: HEADER + name: ${sa-token.token-name} + #杩欓噷瀹氫箟浜嗕袱涓垎缁勶紝鍙畾涔夊涓紝涔熷彲浠ヤ笉瀹氫箟 + group-configs: + - group: 1.婕旂ず妯″潡 + packages-to-scan: org.dromara.demo + - group: 2.閫氱敤妯″潡 + packages-to-scan: org.dromara.web + - group: 3.绯荤粺妯″潡 + packages-to-scan: org.dromara.system + - group: 4.浠g爜鐢熸垚妯″潡 + packages-to-scan: org.dromara.generator + +# 闃叉XSS鏀诲嚮 +xss: + # 杩囨护寮�鍏� + enabled: true + # 鎺掗櫎閾炬帴锛堝涓敤閫楀彿鍒嗛殧锛� + excludes: /system/notice + # 鍖归厤閾炬帴 + urlPatterns: /system/*,/monitor/*,/tool/* + +# 鍏ㄥ眬绾跨▼姹犵浉鍏抽厤缃� +thread-pool: + # 鏄惁寮�鍚嚎绋嬫睜 + enabled: false + # 闃熷垪鏈�澶ч暱搴� + queueCapacity: 128 + # 绾跨▼姹犵淮鎶ょ嚎绋嬫墍鍏佽鐨勭┖闂叉椂闂� + keepAliveSeconds: 300 + +--- # 鍒嗗竷寮忛攣 lock4j 鍏ㄥ眬閰嶇疆 +lock4j: + # 鑾峰彇鍒嗗竷寮忛攣瓒呮椂鏃堕棿锛岄粯璁や负 3000 姣 + acquire-timeout: 3000 + # 鍒嗗竷寮忛攣鐨勮秴鏃舵椂闂达紝榛樿涓� 30 绉� + expire: 30000 + +--- # Actuator 鐩戞帶绔偣鐨勯厤缃」 +management: + endpoints: + web: + exposure: + include: '*' + endpoint: + health: + show-details: ALWAYS + logfile: + external-file: ./logs/sys-console.log + +--- # websocket +websocket: + enabled: true + # 璺緞 + path: /websocket + # 璁剧疆璁块棶婧愬湴鍧� + allowedOrigins: '*' -- Gitblit v1.9.3