Swagger整合Gateway网关

本文介绍如何在 Spring Cloud Gateway 中集成 Swagger,实现 API 文档的统一管理和展示。通过添加 Maven 依赖、配置类、过滤器及适配器,可以成功将多个微服务的 Swagger 文档聚合到网关,方便进行 API 的测试和文档查看。

摘要生成于 C知道 ,由 DeepSeek-R1 满血版支持, 前往体验 >

1.添加maven依赖
    <dependencies>
        <dependency>
            <groupId>org.springframework.cloud</groupId>
            <artifactId>spring-cloud-starter-gateway</artifactId>
        </dependency>
    </dependencies>
    <dependency>
        <groupId>io.springfox</groupId>
        <artifactId>springfox-swagger2</artifactId>
        <version>2.9.2</version>
    </dependency>
    <dependency>
        <groupId>com.github.xiaoymin</groupId>
        <artifactId>swagger-bootstrap-ui</artifactId>
        <version>1.9.0</version>
    </dependency>
    <dependency>
        <groupId>io.swagger</groupId>
        <artifactId>swagger-models</artifactId>
        <version>1.5.21</version>
    </dependency>
2.添加获取swagger /v2/api-docs接口信息配置类
@Component
@Primary
@AllArgsConstructor
public class SwaggerProvider implements SwaggerResourcesProvider {
    public static final String API_URI = "/v2/api-docs";
    private final RouteLocator routeLocator;
    private final GatewayProperties gatewayProperties;


    @Override
    public List<SwaggerResource> get() {
        List<SwaggerResource> resources = new ArrayList<>();
        List<String> routes = new ArrayList<>();
        routeLocator.getRoutes().subscribe(route -> routes.add(route.getId()));
        gatewayProperties.getRoutes().stream().filter(routeDefinition -> routes.contains(routeDefinition.getId()))
                .forEach(routeDefinition -> routeDefinition.getPredicates().stream()
                        .filter(predicateDefinition -> ("Path").equalsIgnoreCase(predicateDefinition.getName()))
                        .forEach(predicateDefinition -> resources.add(swaggerResource(routeDefinition.getId(),
                                predicateDefinition.getArgs().get(NameUtils.GENERATED_NAME_PREFIX + "0")
                                        .replace("/**", API_URI)))));
        return resources;
    }

    private SwaggerResource swaggerResource(String name, String location) {
        SwaggerResource swaggerResource = new SwaggerResource();
        swaggerResource.setName(name);
        swaggerResource.setLocation(location);
        swaggerResource.setSwaggerVersion("2.0");
        return swaggerResource;
    }
}
3.添加swagger地址过滤器
@Component
@Deprecated
public class SwaggerHeaderFilter extends AbstractGatewayFilterFactory {
    private static final String HEADER_NAME = "X-Forwarded-Prefix";

    @Override
    public GatewayFilter apply(Object config) {
        return (exchange, chain) -> {
            ServerHttpRequest request = exchange.getRequest();
            String path = request.getURI().getPath();
            if (!StringUtils.endsWithIgnoreCase(path, SwaggerProvider.API_URI)) {
                return chain.filter(exchange);
            }

            String basePath = path.substring(0, path.lastIndexOf(SwaggerProvider.API_URI));


            ServerHttpRequest newRequest = request.mutate().header(HEADER_NAME, basePath).build();
            ServerWebExchange newExchange = exchange.mutate().request(newRequest).build();
            return chain.filter(newExchange);
        };
    }
}
4.添加swagger适配器
/**
 * SwaggerHandler
 */
@RestController
@RequestMapping("/swagger-resources")
public class SwaggerHandler {
    @Autowired(required = false)
    private SecurityConfiguration securityConfiguration;
    @Autowired(required = false)
    private UiConfiguration uiConfiguration;
    private final SwaggerResourcesProvider swaggerResources;

    @Autowired
    public SwaggerHandler(SwaggerResourcesProvider swaggerResources) {
        this.swaggerResources = swaggerResources;
    }


    @GetMapping("/configuration/security")
    public Mono<ResponseEntity<SecurityConfiguration>> securityConfiguration() {
        return Mono.just(new ResponseEntity<>(
                Optional.ofNullable(securityConfiguration).orElse(SecurityConfigurationBuilder.builder().build()), HttpStatus.OK));
    }

    @GetMapping("/configuration/ui")
    public Mono<ResponseEntity<UiConfiguration>> uiConfiguration() {
        return Mono.just(new ResponseEntity<>(
                Optional.ofNullable(uiConfiguration).orElse(UiConfigurationBuilder.builder().build()), HttpStatus.OK));
    }

    @GetMapping("")
    public Mono<ResponseEntity> swaggerResources() {
        return Mono.just((new ResponseEntity<>(swaggerResources.get(), HttpStatus.OK)));
    }
}
5.添加application.yml文件
server:
  port: 80
spring:
  application:
    name: wmh-gateway
  cloud:
    nacos:
      discovery:
        ##nacos服务注册地址
        server-addr: 127.0.0.1:8848
    gateway:
      locator:
        enabled: true
      routes:
        - id: wmh-wechat
          uri: lb://wmh-wechat
          predicates:
            - Path=/wmh-wechat/**
          filters:
            - SwaggerHeaderFilter
            - StripPrefix=1
        - id: wmh-member
          uri: lb://wmh-member
          predicates:
            - Path=/wmh-member/**
          filters:
            - SwaggerHeaderFilter
            - StripPrefix=1
### Shiro 整合 Spring Cloud Gateway 实现权限控制 #### 1. 添加依赖项 为了使 Shiro 和 Spring Cloud Gateway 能够协同工作,首先需要在项目的 `pom.xml` 文件中添加必要的依赖项。这包括 Spring Cloud Gateway 的启动器以及 Shiro 相关的包。 ```xml <dependencies> <!-- Spring Cloud Gateway --> <dependency> <groupId>org.springframework.cloud</groupId> <artifactId>spring-cloud-starter-gateway</artifactId> </dependency> <!-- Apache Shiro Core --> <dependency> <groupId>org.apache.shiro</groupId> <artifactId>shiro-core</artifactId> <version>${shiro.version}</version> </dependency> <!-- Optional: If using web support --> <dependency> <groupId>org.apache.shiro</groupId> <artifactId>shiro-spring-boot-web-starter</artifactId> <version>${shiro.version}</version> </dependency> </dependencies> ``` 上述代码展示了如何引入所需的 Maven 依赖来支持 Shiro 和 Spring Cloud Gateway 的集成[^1]。 #### 2. 配置 Shiro 过滤器链 为了让 Shiro 可以拦截并处理来自网关的请求,在应用程序配置类中定义 ShiroFilterFactoryBean 是必需的。此工厂 bean 将负责创建用于执行身份验证和授权逻辑的过滤器实例。 ```java @Configuration public class ShiroConfig { @Bean public ShiroFilterFactoryBean shirFilter(SecurityManager securityManager){ ShiroFilterFactoryBean shiroFilterFactoryBean = new ShiroFilterFactoryBean(); // 设置安全管理器 shiroFilterFactoryBean.setSecurityManager(securityManager); // 定义不需要登录即可访问的路径 Map<String, String> filterChainDefinitionMap = new LinkedHashMap<>(); filterChainDefinitionMap.put("/login", "anon"); filterChainDefinitionMap.put("/logout", "logout"); // 所有其他请求都需要经过认证才能访问 filterChainDefinitionMap.put("/**", "authc"); shiroFilterFactoryBean.setFilterChainDefinitionMap(filterChainDefinitionMap); return shiroFilterFactoryBean; } } ``` 这段 Java 代码片段说明了怎样设置 Shiro Filter 来管理不同 URL 模式的访问策略[^4]。 #### 3. 自定义全局过滤器 由于 Spring Cloud Gateway 使用的是基于响应式编程模型(Reactor),因此传统方式下的 Servlet API 并不适用。为此,应该编写自定义 GlobalFilter 或者 GatewayFilter 来适配 Reactor 环境下运行的应用程序需求。 ```java @Component @Slf4j public class AuthGlobalFilter implements GlobalFilter { private final SecurityManager securityManager; public AuthGlobalFilter(SecurityManager securityManager) { this.securityManager = securityManager; } @Override public Mono<Void> filter(ServerWebExchange exchange, GatewayFilterChain chain) { ServerHttpRequest request = exchange.getRequest(); try { Subject subject = new Subject.Builder() .securityManager(this.securityManager).buildSubject(); if (!subject.isAuthenticated()) { log.warn("User is not authenticated."); // 返回未授权状态码给客户端 exchange.getResponse().setStatusCode(HttpStatus.UNAUTHORIZED); return exchange.getResponse().setComplete(); } else { // 继续下一个过滤器 return chain.filter(exchange); } } catch (Exception e) { log.error(e.getMessage(), e); throw new RuntimeException(e); } } } ``` 这里展示了一个简单的全局过滤器实现,该过滤器会在每次 HTTP 请求到达时检查用户的认证状态,并根据情况决定是否允许继续处理请求。 #### 4. 结合 Knife4j 提供安全接口文档 当涉及到多个微服务时,维护一致且易于理解的 API 文档变得尤为重要。借助于 Swagger UI 和其增强版本 Knife4j,开发者能够轻松地为各个服务提供详细的 RESTful 接口描述和支持 OAuth2 认证等功能。 ```yaml knife4j: enable: true swagger-url: http://localhost:${server.port}/v2/api-docs?group=api-group-name ``` 以上 YAML 片段显示了如何启用 Knife4j 插件并将特定分组下的 API 文档暴露出来以便外部查阅[^5]。
评论 4
添加红包

请填写红包祝福语或标题

红包个数最小为10个

红包金额最低5元

当前余额3.43前往充值 >
需支付:10.00
成就一亿技术人!
领取后你会自动成为博主和红包主的粉丝 规则
hope_wisdom
发出的红包
实付
使用余额支付
点击重新获取
扫码支付
钱包余额 0

抵扣说明:

1.余额是钱包充值的虚拟货币,按照1:1的比例进行支付金额的抵扣。
2.余额无法直接购买下载,可以购买VIP、付费专栏及课程。

余额充值