1.問題場景
因為warehouse子項目的前端未開發,所以只能通過postman測試接口訪問;
?
2.解決方法
package org.sharetek.common.security.config;import cn.dev33.satoken.SaManager;
import cn.dev33.satoken.filter.SaServletFilter;
import cn.dev33.satoken.interceptor.SaInterceptor;
import cn.dev33.satoken.same.SaSameUtil;
import cn.dev33.satoken.util.SaResult;
import com.alibaba.csp.sentinel.adapter.spring.webmvc.SentinelWebInterceptor;
import org.sharetek.common.core.constant.HttpStatus;
import org.springframework.boot.autoconfigure.AutoConfiguration;
import org.springframework.context.annotation.Bean;
import org.springframework.web.servlet.config.annotation.InterceptorRegistry;
import org.springframework.web.servlet.config.annotation.WebMvcConfigurer;/*** 權限安全配置*/
@AutoConfiguration
public class SecurityConfiguration implements WebMvcConfigurer {/*** 注冊sa-token的攔截器*/@Overridepublic void addInterceptors(InterceptorRegistry registry) {// 注冊路由攔截器,自定義驗證規則registry.addInterceptor(new SaInterceptor()).addPathPatterns("/**");registry.addInterceptor(new SentinelWebInterceptor()).addPathPatterns("/**");}/*** 校驗是否從網關轉發 TODO 2024*/@Beanpublic SaServletFilter getSaServletFilter() {return new SaServletFilter().addInclude("/**").addExclude("/actuator/**").setAuth(obj -> {if (SaManager.getConfig().getCheckSameToken()) {SaSameUtil.checkCurrentRequestToken();}}).setError(e -> SaResult.error("認證失敗,無法訪問系統資源").setCode(HttpStatus.UNAUTHORIZED));}}
?
<dependency><groupId>com.alibaba.csp</groupId><artifactId>sentinel-spring-webmvc-6x-adapter</artifactId>
</dependency>
重啟服務后,sentinel dashboard監控訪問正常了.