spring cloud (Greenwich.SR2)踩坑第一天

最新推荐文章于 2020-12-17 22:18:31 发布

原创最新推荐文章于 2020-12-17 22:18:31 发布 · 1k 阅读

0 ·

CC 4.0 BY-SA版权

文章标签：

#cloud #security #坑

springcloud 专栏收录该内容

1 篇文章

订阅专栏

本文介绍了在Spring Cloud Greenwich.SR2中遇到的安全认证问题。当启用Eureka Server的security认证后，启动服务报错，原因是Spring Cloud 2.0以上版本默认启用了csrf检验。解决方案是在Eureka Server端禁用csrf，并创建WebSecurityConfig配置。成功登录Eureka Server后，发现访问其他服务也需要身份验证，经过调查发现默认用户名为'user'，密码在启动时生成。

摘要生成于 C知道，由 DeepSeek-R1 满血版支持，前往体验 >

服务中心eureka开启security认证

1、入口类加注解@EnableEurekaServer

2、eureka-server修改配置文件application.properties

server.port:8761
spring.application.name=cloud-pratice-erueka-server

#开启server登录认证
spring.security.user.name=root
spring.security.user.password=123456

#设置该服务为eureka服务端
eureka.client.register-with-eureka=false
eureka.client.fetch-registry=false

1、入口类加注解@EnableDiscoveryClient
2、provider 注册到服务中心 application.properties

server.port=8001
spring.application.name=cloud-pratice-provider

#eureka普通注册方式
#eureka.client.serviceUrl.defaultZone=http://localhost:8761/eureka
#eureka带登录认证的注册方式 root:123456  用户名：密码
eureka.client.serviceUrl.defaultZone=http://root:123456@localhost:8761/eureka
#eureka.client.healthcheck.enabled=true

接下来启动第一个服务 cloud-pratice-erueka-server、然后启动第二个cloud-pratice-provider，夸夸夸，报错了

2019-08-09 15:11:21.265  WARN 12340 --- [nfoReplicator-0] c.n.d.s.t.d.RetryableEurekaHttpClient    : Request execution failure with status code 403; retrying on another server if available
2019-08-09 15:11:21.268  WARN 12340 --- [nfoReplicator-0] com.netflix.discovery.DiscoveryClient    : DiscoveryClient_CLOUD-PRATICE-PROVIDER/windows10.microdone.cn:cloud-pratice-provider:8001 - registration failed Cannot execute request on any known server

com.netflix.discovery.shared.transport.TransportException: Cannot execute request on any known server
	at com.netflix.discovery.shared.transport.decorator.RetryableEurekaHttpClient.execute(RetryableEurekaHttpClient.java:112) ~[eureka-client-1.9.12.jar:1.9.12]
	at com.netflix.discovery.shared.transport.decorator.EurekaHttpClientDecorator.register(EurekaHttpClientDecorator.java:56) ~[eureka-client-1.9.12.jar:1.9.12]
	at com.netflix.discovery.shared.transport.decorator.EurekaHttpClientDecorator$1.execute(EurekaHttpClientDecorator.java:59) ~[eureka-client-1.9.12.jar:1.9.12]
	at com.netflix.discovery.shared.transport.decorator.SessionedEurekaHttpClient.execute(SessionedEurekaHttpClient.java:77) ~[eureka-client-1.9.12.jar:1.9.12]
	at com.netflix.discovery.shared.transport.decorator.EurekaHttpClientDecorator.register(EurekaHttpClientDecorator.java:56) ~[eureka-client-1.9.12.jar:1.9.12]
	at com.netflix.discovery.DiscoveryClient.register(DiscoveryClient.java:847) ~[eureka-client-1.9.12.jar:1.9.12]
	at com.netflix.discovery.InstanceInfoReplicator.run(InstanceInfoReplicator.java:121) [eureka-client-1.9.12.jar:1.9.12]
	at com.netflix.discovery.InstanceInfoReplicator$1.run(InstanceInfoReplicator.java:101) [eureka-client-1.9.12.jar:1.9.12]
	at java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:511) [na:1.8.0_201]
	at java.util.concurrent.FutureTask.run$$$capture(FutureTask.java:266) [na:1.8.0_201]
	at java.util.concurrent.FutureTask.run(FutureTask.java) [na:1.8.0_201]
	at java.util.concurrent.ScheduledThreadPoolExecutor$ScheduledFutureTask.access$201(ScheduledThreadPoolExecutor.java:180) [na:1.8.0_201]
	at java.util.concurrent.ScheduledThreadPoolExecutor$ScheduledFutureTask.run(ScheduledThreadPoolExecutor.java:293) [na:1.8.0_201]
	at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149) [na:1.8.0_201]
	at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624) [na:1.8.0_201]
	at java.lang.Thread.run(Thread.java:748) [na:1.8.0_201]

2019-08-09 15:11:21.269  WARN 12340 --- [nfoReplicator-0] c.n.discovery.InstanceInfoReplicator     : There was a problem with the instance info replicator

com.netflix.discovery.shared.transport.TransportException: Cannot execute request on any known server
	at com.netflix.discovery.shared.transport.decorator.RetryableEurekaHttpClient.execute(RetryableEurekaHttpClient.java:112) ~[eureka-client-1.9.12.jar:1.9.12]
	at com.netflix.discovery.shared.transport.decorator.EurekaHttpClientDecorator.register(EurekaHttpClientDecorator.java:56) ~[eureka-client-1.9.12.jar:1.9.12]
	at com.netflix.discovery.shared.transport.decorator.EurekaHttpClientDecorator$1.execute(EurekaHttpClientDecorator.java:59) ~[eureka-client-1.9.12.jar:1.9.12]
	at com.netflix.discovery.shared.transport.decorator.SessionedEurekaHttpClient.execute(SessionedEurekaHttpClient.java:77) ~[eureka-client-1.9.12.jar:1.9.12]
	at com.netflix.discovery.shared.transport.decorator.EurekaHttpClientDecorator.register(EurekaHttpClientDecorator.java:56) ~[eureka-client-1.9.12.jar:1.9.12]
	at com.netflix.discovery.DiscoveryClient.register(DiscoveryClient.java:847) ~[eureka-client-1.9.12.jar:1.9.12]
	at com.netflix.discovery.InstanceInfoReplicator.run(InstanceInfoReplicator.java:121) ~[eureka-client-1.9.12.jar:1.9.12]
	at com.netflix.discovery.InstanceInfoReplicator$1.run(InstanceInfoReplicator.java:101) [eureka-client-1.9.12.jar:1.9.12]
	at java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:511) [na:1.8.0_201]
	at java.util.concurrent.FutureTask.run$$$capture(FutureTask.java:266) [na:1.8.0_201]
	at java.util.concurrent.FutureTask.run(FutureTask.java) [na:1.8.0_201]
	at java.util.concurrent.ScheduledThreadPoolExecutor$ScheduledFutureTask.access$201(ScheduledThreadPoolExecutor.java:180) [na:1.8.0_201]
	at java.util.concurrent.ScheduledThreadPoolExecutor$ScheduledFutureTask.run(ScheduledThreadPoolExecutor.java:293) [na:1.8.0_201]
	at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149) [na:1.8.0_201]
	at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624) [na:1.8.0_201]
	at java.lang.Thread.run(Thread.java:748) [na:1.8.0_201]

这个问题原因是：新版（Spring Cloud 2.0 以上）的security默认启用了csrf检验，要在eurekaServer端配置security的csrf检验为false

解决这个问题可以用下述方案

增加一个配置WebSecurityConfig

@EnableWebSecurity
public class WebSecurityConfig extends WebSecurityConfigurerAdapter {
    @Override
    protected void configure(HttpSecurity http) throws Exception {
        http.csrf().disable();
        super.configure(http);
    }
}

好了再次启动，顺利
访问localhost:8761
输入用户名密码，顺利登陆
访问localhost:8001
也要输入用户名密码！想当然（可能只有我一个人这么想当然了）的输入和eureka server一样的，登陆---->用户名密码错误！

啥情况？
经调查发现如果不配置用户名密码，系统默认分配密码，项目启动时可以看见很长的一串，
用户名默认：user
密码：项目启动时生成的一长串，输入成功登陆！
启动截图