From 3aa39d37cec11c016be6b78f76a2b597796045d5 Mon Sep 17 00:00:00 2001 From: xiang Date: Thu, 19 Mar 2026 22:37:22 +0800 Subject: [PATCH] =?UTF-8?q?feat:=E7=BD=91=E5=85=B3?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- pom.xml | 23 +++++---- .../service/config/GatewaySecurityConfig.java | 48 +++++++++---------- .../service/core/AuthGlobalFilter.java | 17 ------- 3 files changed, 35 insertions(+), 53 deletions(-) diff --git a/pom.xml b/pom.xml index aecd813..2b3a6d4 100644 --- a/pom.xml +++ b/pom.xml @@ -3,9 +3,9 @@ xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/xsd/maven-4.0.0.xsd"> - com.xiang - xservice-basic - 1.1 + com.xiang.pom + xmc-web-starter + 1.0 pom @@ -69,18 +69,17 @@ spring-cloud-starter-loadbalancer - - com.xiang - xservice-parent-starter - 2.0 + com.xiang.starter + xmc-common + 1.1 - - com.xiang - xservice-security-starter - 1.0-SNAPSHOT - + + + + + diff --git a/xs-service/src/main/java/com/xiang/xservice/gateway/service/config/GatewaySecurityConfig.java b/xs-service/src/main/java/com/xiang/xservice/gateway/service/config/GatewaySecurityConfig.java index 573c08f..41a2a8d 100644 --- a/xs-service/src/main/java/com/xiang/xservice/gateway/service/config/GatewaySecurityConfig.java +++ b/xs-service/src/main/java/com/xiang/xservice/gateway/service/config/GatewaySecurityConfig.java @@ -1,24 +1,24 @@ -package com.xiang.xservice.gateway.service.config; - -import org.springframework.context.annotation.Bean; -import org.springframework.context.annotation.Configuration; -import org.springframework.security.config.annotation.web.reactive.EnableWebFluxSecurity; -import org.springframework.security.config.web.server.ServerHttpSecurity; -import org.springframework.security.web.server.SecurityWebFilterChain; - -@Configuration -@EnableWebFluxSecurity -public class GatewaySecurityConfig { - - @Bean - public SecurityWebFilterChain springSecurityFilterChain(ServerHttpSecurity http) { - http - .authorizeExchange(exchanges -> exchanges - // ✅ 网关全放行 - .anyExchange().permitAll() - ) - .csrf(ServerHttpSecurity.CsrfSpec::disable); // 禁用 CSRF - - return http.build(); - } -} \ No newline at end of file +//package com.xiang.xservice.gateway.service.config; +// +//import org.springframework.context.annotation.Bean; +//import org.springframework.context.annotation.Configuration; +//import org.springframework.security.config.annotation.web.reactive.EnableWebFluxSecurity; +//import org.springframework.security.config.web.server.ServerHttpSecurity; +//import org.springframework.security.web.server.SecurityWebFilterChain; +// +//@Configuration +//@EnableWebFluxSecurity +//public class GatewaySecurityConfig { +// +// @Bean +// public SecurityWebFilterChain springSecurityFilterChain(ServerHttpSecurity http) { +// http +// .authorizeExchange(exchanges -> exchanges +// // ✅ 网关全放行 +// .anyExchange().permitAll() +// ) +// .csrf(ServerHttpSecurity.CsrfSpec::disable); // 禁用 CSRF +// +// return http.build(); +// } +//} \ No newline at end of file diff --git a/xs-service/src/main/java/com/xiang/xservice/gateway/service/core/AuthGlobalFilter.java b/xs-service/src/main/java/com/xiang/xservice/gateway/service/core/AuthGlobalFilter.java index 1a58fc6..73a09db 100644 --- a/xs-service/src/main/java/com/xiang/xservice/gateway/service/core/AuthGlobalFilter.java +++ b/xs-service/src/main/java/com/xiang/xservice/gateway/service/core/AuthGlobalFilter.java @@ -1,8 +1,6 @@ package com.xiang.xservice.gateway.service.core; -import com.xiang.xservice.security.utils.TokenUtils; import lombok.extern.slf4j.Slf4j; -import org.springframework.beans.factory.annotation.Autowired; import org.springframework.cloud.gateway.filter.GatewayFilterChain; import org.springframework.cloud.gateway.filter.GlobalFilter; import org.springframework.core.Ordered; @@ -17,9 +15,6 @@ import reactor.core.publisher.Mono; @Component public class AuthGlobalFilter implements GlobalFilter, Ordered { - @Autowired - private TokenUtils tokenUtils; - @Override public Mono filter(ServerWebExchange exchange, GatewayFilterChain chain) { ServerHttpRequest request = exchange.getRequest(); @@ -39,18 +34,6 @@ public class AuthGlobalFilter implements GlobalFilter, Ordered { return exchange.getResponse().setComplete(); } -// try { -// if (!tokenUtils.validateToken(token)) { -// log.warn("❌ Token 校验失败: {}", token); -// exchange.getResponse().setStatusCode(HttpStatus.UNAUTHORIZED); -// return exchange.getResponse().setComplete(); -// } -// } catch (Exception e) { -// log.error("❌ Token 校验异常", e); -// exchange.getResponse().setStatusCode(HttpStatus.UNAUTHORIZED); -// return exchange.getResponse().setComplete(); -// } - log.info("✅ Token 校验通过: {}", token); return chain.filter(exchange); }