From f46d8818663ace96cb6bc69c0e048cb550018c48 Mon Sep 17 00:00:00 2001
From: 疯狂的狮子Li <15040126243@163.com>
Date: 星期四, 25 七月 2024 13:12:58 +0800
Subject: [PATCH] add 增加 snailjob 健康检查 actuator 账号密码认证
---
ruoyi-extend/ruoyi-snailjob-server/src/main/java/com/aizuda/snailjob/server/starter/filter/ActuatorAuthFilter.java | 64 ++++++++++++++++++++++++++++++++
ruoyi-extend/ruoyi-snailjob-server/src/main/java/com/aizuda/snailjob/server/starter/filter/SecurityConfig.java | 29 ++++++++++++++
2 files changed, 93 insertions(+), 0 deletions(-)
diff --git a/ruoyi-extend/ruoyi-snailjob-server/src/main/java/com/aizuda/snailjob/server/starter/filter/ActuatorAuthFilter.java b/ruoyi-extend/ruoyi-snailjob-server/src/main/java/com/aizuda/snailjob/server/starter/filter/ActuatorAuthFilter.java
new file mode 100644
index 0000000..e3a6892
--- /dev/null
+++ b/ruoyi-extend/ruoyi-snailjob-server/src/main/java/com/aizuda/snailjob/server/starter/filter/ActuatorAuthFilter.java
@@ -0,0 +1,64 @@
+package com.aizuda.snailjob.server.starter.filter;
+
+import jakarta.servlet.*;
+import jakarta.servlet.http.HttpServletRequest;
+import jakarta.servlet.http.HttpServletResponse;
+
+import java.io.IOException;
+import java.nio.charset.StandardCharsets;
+import java.util.Base64;
+
+public class ActuatorAuthFilter implements Filter {
+
+ private final String username;
+ private final String password;
+
+ public ActuatorAuthFilter(String username, String password) {
+ this.username = username;
+ this.password = password;
+ }
+
+ @Override
+ public void doFilter(ServletRequest servletRequest, ServletResponse servletResponse, FilterChain filterChain) throws IOException, ServletException {
+ HttpServletRequest request = (HttpServletRequest) servletRequest;
+ HttpServletResponse response = (HttpServletResponse) servletResponse;
+
+ // 鑾峰彇 Authorization 澶�
+ String authHeader = request.getHeader("Authorization");
+
+ if (authHeader == null || !authHeader.startsWith("Basic ")) {
+ // 濡傛灉娌℃湁鎻愪緵 Authorization 鎴栬�呮牸寮忎笉瀵癸紝鍒欒繑鍥� 401
+ response.setHeader("WWW-Authenticate", "Basic realm=\"realm\"");
+ response.sendError(HttpServletResponse.SC_UNAUTHORIZED, "Unauthorized");
+ return;
+ }
+
+ // 瑙ｇ爜 Base64 缂栫爜鐨勭敤鎴峰悕鍜屽瘑鐮�
+ String base64Credentials = authHeader.substring("Basic ".length());
+ byte[] credDecoded = Base64.getDecoder().decode(base64Credentials);
+ String credentials = new String(credDecoded, StandardCharsets.UTF_8);
+ String[] split = credentials.split(":");
+ if (split.length != 2) {
+ response.setHeader("WWW-Authenticate", "Basic realm=\"realm\"");
+ response.sendError(HttpServletResponse.SC_UNAUTHORIZED, "Unauthorized");
+ return;
+ }
+ // 楠岃瘉鐢ㄦ埛鍚嶅拰瀵嗙爜
+ if (!username.equals(split[0]) && password.equals(split[1])) {
+ response.setHeader("WWW-Authenticate", "Basic realm=\"realm\"");
+ response.sendError(HttpServletResponse.SC_UNAUTHORIZED, "Unauthorized");
+ return;
+ }
+ // 濡傛灉璁よ瘉鎴愬姛锛岀户缁鐞嗚姹�
+ filterChain.doFilter(request, response);
+ }
+
+ @Override
+ public void init(FilterConfig filterConfig) {
+ }
+
+ @Override
+ public void destroy() {
+ }
+
+}
diff --git a/ruoyi-extend/ruoyi-snailjob-server/src/main/java/com/aizuda/snailjob/server/starter/filter/SecurityConfig.java b/ruoyi-extend/ruoyi-snailjob-server/src/main/java/com/aizuda/snailjob/server/starter/filter/SecurityConfig.java
new file mode 100644
index 0000000..3cae8f5
--- /dev/null
+++ b/ruoyi-extend/ruoyi-snailjob-server/src/main/java/com/aizuda/snailjob/server/starter/filter/SecurityConfig.java
@@ -0,0 +1,29 @@
+package com.aizuda.snailjob.server.starter.filter;
+
+import org.springframework.beans.factory.annotation.Value;
+import org.springframework.boot.web.servlet.FilterRegistrationBean;
+import org.springframework.context.annotation.Bean;
+import org.springframework.context.annotation.Configuration;
+
+/**
+ * 鏉冮檺瀹夊叏閰嶇疆
+ *
+ * @author Lion Li
+ */
+@Configuration
+public class SecurityConfig {
+
+ @Value("${spring.boot.admin.client.username}")
+ private String username;
+ @Value("${spring.boot.admin.client.password}")
+ private String password;
+
+ @Bean
+ public FilterRegistrationBean<ActuatorAuthFilter> actuatorFilterRegistrationBean() {
+ FilterRegistrationBean<ActuatorAuthFilter> registrationBean = new FilterRegistrationBean<>();
+ registrationBean.setFilter(new ActuatorAuthFilter(username, password));
+ registrationBean.addUrlPatterns("/actuator", "/actuator/**");
+ return registrationBean;
+ }
+
+}
--
Gitblit v1.9.3