安全服务添加多环境支持

This commit is contained in:
ajaxfan
2021-03-12 17:24:36 +08:00
parent c1904bb00a
commit 330d54b0e9
2 changed files with 23 additions and 4 deletions

View File

@ -4,6 +4,7 @@ import java.io.IOException;
import java.util.List; import java.util.List;
import java.util.Objects; import java.util.Objects;
import java.util.stream.Collectors; import java.util.stream.Collectors;
import java.util.stream.Stream;
import javax.servlet.FilterChain; import javax.servlet.FilterChain;
import javax.servlet.ServletException; import javax.servlet.ServletException;
@ -13,7 +14,8 @@ import javax.servlet.http.HttpServletResponse;
import org.apache.commons.lang3.RegExUtils; import org.apache.commons.lang3.RegExUtils;
import org.apache.commons.lang3.StringUtils; import org.apache.commons.lang3.StringUtils;
import org.springframework.beans.factory.annotation.Autowired; import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.beans.factory.annotation.Value; import org.springframework.context.ApplicationContext;
import org.springframework.core.env.Environment;
import org.springframework.http.HttpEntity; import org.springframework.http.HttpEntity;
import org.springframework.http.HttpHeaders; import org.springframework.http.HttpHeaders;
import org.springframework.http.HttpMethod; import org.springframework.http.HttpMethod;
@ -39,7 +41,9 @@ import lombok.extern.slf4j.Slf4j;
public class TokenAuthenticationFilter extends OncePerRequestFilter { public class TokenAuthenticationFilter extends OncePerRequestFilter {
private @Autowired RestTemplate restTemplate; private @Autowired RestTemplate restTemplate;
private @Value("${user.auth.resource.userinfo}") String token_uri; private @Autowired ApplicationContext context;
private final String token_url_config_format = "user.auth.resource.userinfo.%s";
/** /**
* @param request * @param request
@ -83,7 +87,7 @@ public class TokenAuthenticationFilter extends OncePerRequestFilter {
// 设置安全头 // 设置安全头
headers.add(HttpHeaders.AUTHORIZATION, String.format("Bearer %s", token)); headers.add(HttpHeaders.AUTHORIZATION, String.format("Bearer %s", token));
ResponseEntity<SecurityUser> entity = restTemplate.exchange(token_uri, HttpMethod.GET, ResponseEntity<SecurityUser> entity = restTemplate.exchange(getTokenURI(), HttpMethod.GET,
new HttpEntity<String>(headers), SecurityUser.class); new HttpEntity<String>(headers), SecurityUser.class);
SecurityUser securityUser = entity.getBody(); SecurityUser securityUser = entity.getBody();
@ -97,4 +101,17 @@ public class TokenAuthenticationFilter extends OncePerRequestFilter {
authorities); authorities);
} }
/**
* 用户信息接口地址
*
* @return
*/
private String getTokenURI() {
Environment env = context.getEnvironment();
String config = Stream.of(env.getActiveProfiles()).findFirst().map(first -> first).orElseGet(() -> "default");
return env.getProperty(String.format(token_url_config_format, config));
}
} }

View File

@ -1,2 +1,4 @@
user.auth.resource.userinfo=http://10.242.31.158:8100/core-service-ebtp-userinfo/v1/userinfo/get user.auth.resource.userinfo.default=http://10.242.31.158:8100/core-service-ebtp-userinfo/v1/userinfo/get
user.auth.resource.userinfo.uat=http://10.242.31.158:8100/core-service-ebtp-userinfo/v1/userinfo/get
user.auth.resource.userinfo.test=http://10.242.37.148:8100/core-service-ebtp-userinfo/v1/userinfo/get
user.auth.csrf.disable=true user.auth.csrf.disable=true