SpringCloudAlibaba学习-03-Nacos添加鉴权

参考: https://nacos.io/zh-cn/docs/auth.html
注意:

Nacos是一个内部微服务组件，需要在可信的内部网络中运行，不可暴露在公网环境，防止带来安全风险。
Nacos提供简单的鉴权实现，为防止业务错用的弱鉴权体系，不是防止恶意攻击的强鉴权体系。
如果运行在不可信的网络环境或者有强鉴权诉求，请参考官方简单实现做替换增强。

nacos-server开启鉴权: docker 安装

docker-compose文件

version: "3.7" 
services:
    nacos_server:
        image: nacos/nacos-server 
        container_name: nacos-server
        ports: 
            - 8848:8848
        volumes:
            - ./standalone-logs/:/home/nacos/logs
            - ./init.d/custom.properties:/home/nacos/init.d/custom.properties
        environment:
            - PREFER_HOST_MODE=hostname
            - MODE=standalone
            - NACOS_AUTH_ENABLE=true
            

登录nacos 创建相关信息
1 命名空间(我习惯用命名空间区分项目, 用group区分开发,测试和正式环境)

2 创建用户和权限
① 创建用户

②创建角色
角色名自定义,用户名使用刚创建的

③ 权限管理
角色名:使用刚创建的角色名, 资源使用刚创建的命名空间, 动作:选读写

3 provider端的配置文件:
建议使用 bootstrap.yml 而不是 application.yml (容易读取不到)

spring:
  application:
    name: nacos-provider
  cloud:
    nacos:
      discovery:
        server-addr: localhost:8848 
        username: root
        password: root123
        namespace: 473001ff-e4a1-4b01-80fd-12c8d3d7db67  # 命名空间
        group: dev
server:
  port: 8181

代码参考:
https://blog.youkuaiyun.com/xy3233/article/details/121820554

pom.xml 文件用于参考, 版本是个大问题,很容易版本不兼容

<?xml version="1.0" encoding="UTF-8"?>
<project xmlns="http://maven.apache.org/POM/4.0.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
         xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 https://maven.apache.org/xsd/maven-4.0.0.xsd">
    <modelVersion>4.0.0</modelVersion>
    <parent>
        <groupId>org.springframework.boot</groupId>
        <artifactId>spring-boot-starter-parent</artifactId>
        <version>2.3.2.RELEASE</version>
        <relativePath/> <!-- lookup parent from repository -->
    </parent>
    <groupId>com.demo.springcloud_02_nacos_cluster</groupId>
    <artifactId>nacos-cluster-provider_1</artifactId>
    <version>0.0.1-SNAPSHOT</version>
    <name>nacos-cluster-private_1</name>
    <description>Demo project for Spring Boot</description>


    <properties>
        <spring.cloud.version>Hoxton.SR9</spring.cloud.version>
        <spring.boot.version>2.3.2.RELEASE</spring.boot.version>
        <spring.cloud.alibaba.version>2.2.6.RELEASE</spring.cloud.alibaba.version>
    </properties>
    <dependencies>
        <dependency>
            <groupId>org.springframework.boot</groupId>
            <artifactId>spring-boot-starter</artifactId>
        </dependency>

        <dependency>
            <groupId>org.springframework.boot</groupId>
            <artifactId>spring-boot-starter-test</artifactId>
            <scope>test</scope>
        </dependency>
        <dependency>
            <groupId>org.projectlombok</groupId>
            <artifactId>lombok</artifactId>
            <version>1.18.0</version>
            <optional>true</optional>
        </dependency>
        <dependency>
            <groupId>org.springframework.boot</groupId>
            <artifactId>spring-boot-starter-web</artifactId>
        </dependency>
        <dependency>
            <groupId>org.springframework.boot</groupId>
            <artifactId>spring-boot-starter-test</artifactId>
            <scope>test</scope>
        </dependency>
        <!--nacos注册中心-->
        <dependency>
            <groupId>com.alibaba.cloud</groupId>
            <artifactId>spring-cloud-starter-alibaba-nacos-discovery</artifactId>
            <version>${spring.cloud.alibaba.version}</version>
        </dependency>
    </dependencies>

    <dependencyManagement>
        <dependencies>
            <!--spring-boot-->
            <dependency>
                <groupId>org.springframework.boot</groupId>
                <artifactId>spring-boot-dependencies</artifactId>
                <version>${spring.boot.version}</version>
                <type>pom</type>
                <scope>import</scope>
            </dependency>
            <!-- spring-cloud -->
            <dependency>
                <groupId>org.springframework.cloud</groupId>
                <artifactId>spring-cloud-dependencies</artifactId>
                <version>${spring.cloud.version}</version>
                <type>pom</type>
                <scope>import</scope>
            </dependency>
            <!-- spring-cloud-alibaba -->
            <dependency>
                <groupId>com.alibaba.cloud</groupId>
                <artifactId>spring-cloud-alibaba-dependencies</artifactId>
                <version>${spring.cloud.alibaba.version}</version>
                <type>pom</type>
                <scope>import</scope>
            </dependency>
        </dependencies>
    </dependencyManagement>

    <build>
        <plugins>
            <plugin>
                <groupId>org.springframework.boot</groupId>
                <artifactId>spring-boot-maven-plugin</artifactId>
            </plugin>
        </plugins>
    </build>

</project>

项目启动就可以在服务列表中看到了