解决安全漏洞

This commit is contained in:
weiweiw 2024-08-01 13:30:44 +08:00
parent ff8fd57c16
commit 00a653222a
32 changed files with 128 additions and 117 deletions

View File

@ -12,16 +12,14 @@ spring:
active: dev active: dev
cloud: cloud:
nacos: nacos:
username: nacos
password: nacos
discovery: discovery:
# 服务注册地址 # 服务注册地址
server-addr: 192.168.0.14:8848 server-addr: 192.168.0.14:8848
namespace: f648524d-0a7b-449e-8f92-64e05236fd51 namespace: 9404b13b-4b90-4759-98c7-f5d7a670ffd8
config: config:
# 配置中心地址 # 配置中心地址
server-addr: 192.168.0.14:8848 server-addr: 192.168.0.14:8848
namespace: f648524d-0a7b-449e-8f92-64e05236fd51 namespace: 9404b13b-4b90-4759-98c7-f5d7a670ffd8
# 配置文件格式 # 配置文件格式
file-extension: yml file-extension: yml
# 共享配置 # 共享配置
@ -31,4 +29,5 @@ spring:
#加密组件 #加密组件
jasypt: jasypt:
encryptor: encryptor:
password: Encrypt password: Encrypt

View File

@ -78,17 +78,17 @@ public class AesCbcUtils {
return null; return null;
} }
public static void main(String[] args) { // public static void main(String[] args) {
// String json=""; // // String json="";
//
String json="{\"username\":\"guest\",\"password\":\"admin@123\"}"; // String json="{\"username\":\"guest\",\"password\":\"admin@123\"}";
String data=encrypt(json); // String data=encrypt(json);
System.err.println(data); // System.err.println(data);
String jm=decrypt("\"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\""); // String jm=decrypt("\"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\"");
String jiemi=decrypt(data); // String jiemi=decrypt(data);
System.err.println(jm); // System.err.println(jm);
System.err.println(jiemi); // System.err.println(jiemi);
} // }
/** /**
* AES解密 * AES解密

View File

@ -31,14 +31,14 @@ public class Sm2Util {
return HexUtil.encodeHexStr(BCUtil.encodeECPrivateKey(sm2.getPrivateKey())); return HexUtil.encodeHexStr(BCUtil.encodeECPrivateKey(sm2.getPrivateKey()));
} }
public static void main(String[] args) { // public static void main(String[] args) {
String privateKey = getPrivateKey(); // String privateKey = getPrivateKey();
String publicKey = getPublicKey(); // String publicKey = getPublicKey();
String msg= encrypt(publicKey,"1234567890"); // String msg= encrypt(publicKey,"1234567890");
// String msg2= decrypt(privateKey,msg); //// String msg2= decrypt(privateKey,msg);
System.err.println(msg); // System.err.println(msg);
// System.err.println(msg2); //// System.err.println(msg2);
} // }
/** /**
* 加密 * 加密
*公钥加密 *公钥加密

View File

@ -15,11 +15,11 @@ public class Sm3Util {
static SM3 sm3 = SmUtil.sm3WithSalt("2cc0c5f9f1749f1632efa9f63e902323".getBytes(StandardCharsets.UTF_8)); static SM3 sm3 = SmUtil.sm3WithSalt("2cc0c5f9f1749f1632efa9f63e902323".getBytes(StandardCharsets.UTF_8));
public static void main(String[] args) { // public static void main(String[] args) {
//
String msg= encrypt("1234567890"); // String msg= encrypt("1234567890");
System.err.println(msg); // System.err.println(msg);
} // }
public static String encrypt(String data) { public static String encrypt(String data) {
return Sm3Util.sm3.digestHex(data); return Sm3Util.sm3.digestHex(data);

View File

@ -47,10 +47,10 @@ public class Sm4Utils {
} }
public static void main(String[] args) { // public static void main(String[] args) {
String msg= encode("1234567890"); // String msg= encode("1234567890");
System.err.println(msg); // System.err.println(msg);
//
} // }
} }

View File

@ -25,10 +25,13 @@ public class BonusGatewayApplication implements CommandLineRunner {
private StringEncryptor encryptor; private StringEncryptor encryptor;
@Override @Override
public void run(String... args) throws Exception { public void run(String... args) throws Exception {
// String nacos = encrypt("Jjsp@nacos2023" ); String nacos = encrypt("Jjsp@nacos2023" );
// String mogodb = encrypt("Bonus@admin123!" ); String mogodb = encrypt("Bonus@admin123!" );
// System.err.println( "nacos原始明文密码加密后的结果为" + nacos ); System.err.println( "nacos原始明文密码加密后的结果为" + nacos );
// System.err.println( "mogodb原始明文密码加密后的结果为" + mogodb ); System.err.println( "mogodb原始明文密码加密后的结果为" + mogodb );
// String string = decrypt("ENC(b8K5x5rjN7qdGdmhgzFayK/P6ZVbC/UNBHjx2SBJkoqU149aXRtJsFhDZcgpckFf)");
// System.err.println( "明文结果为:" + string );
} }
private String encrypt( String originPassord ) { private String encrypt( String originPassord ) {

View File

@ -13,16 +13,14 @@ spring:
active: dev active: dev
cloud: cloud:
nacos: nacos:
username: nacos
password: ENC(b8K5x5rjN7qdGdmhgzFayK/P6ZVbC/UNBHjx2SBJkoqU149aXRtJsFhDZcgpckFf)
discovery: discovery:
# 服务注册地址 # 服务注册地址
server-addr: 192.168.0.14:8848 server-addr: 192.168.0.14:8848
namespace: f0e6fc14-465e-4268-adc8-cb33c3d4d755 namespace: 9404b13b-4b90-4759-98c7-f5d7a670ffd8
config: config:
# 配置中心地址 # 配置中心地址
server-addr: 192.168.0.14:8848 server-addr: 192.168.0.14:8848
namespace: f0e6fc14-465e-4268-adc8-cb33c3d4d755 namespace: 9404b13b-4b90-4759-98c7-f5d7a670ffd8
# 配置文件格式 # 配置文件格式
file-extension: yml file-extension: yml
# 共享配置 # 共享配置
@ -38,20 +36,18 @@ spring:
datasource: datasource:
ds1: ds1:
nacos: nacos:
username: nacos
password: nacos
server-addr: 192.168.0.14:8848 server-addr: 192.168.0.14:8848
namespace: f648524d-0a7b-449e-8f92-64e05236fd51 namespace: 9404b13b-4b90-4759-98c7-f5d7a670ffd8
dataId: sentinel-bonus-gateway dataId: sentinel-bonus-gateway
groupId: DEFAULT_GROUP groupId: DEFAULT_GROUP
data-type: json data-type: json
rule-type: gw-flow rule-type: gw-flow
#系统 自动 加解密开关 ##系统 自动 加解密开关
system: #system:
encryptEnabled: true # encryptEnabled: false
decryptEnabled: true # decryptEnabled: false
#加密组件 #加密组件
jasypt: jasypt:
encryptor: encryptor:

View File

@ -12,16 +12,14 @@ spring:
active: dev active: dev
cloud: cloud:
nacos: nacos:
username: nacos
password: nacos
discovery: discovery:
# 服务注册地址 # 服务注册地址
server-addr: 192.168.0.14:8848 server-addr: 192.168.0.56:8848
namespace: f648524d-0a7b-449e-8f92-64e05236fd51 namespace: 9cde1ce1-98bc-4b9c-9213-f1fbf8a5b3cc
config: config:
# 配置中心地址 # 配置中心地址
server-addr: 192.168.0.14:8848 server-addr: 192.168.0.56:8848
namespace: f648524d-0a7b-449e-8f92-64e05236fd51 namespace: 9cde1ce1-98bc-4b9c-9213-f1fbf8a5b3cc
# 配置文件格式 # 配置文件格式
file-extension: yml file-extension: yml
# 共享配置 # 共享配置

View File

@ -12,16 +12,14 @@ spring:
active: dev active: dev
cloud: cloud:
nacos: nacos:
username: nacos
password: nacos
discovery: discovery:
# 服务注册地址 # 服务注册地址
server-addr: 192.168.0.14:8848 server-addr: 192.168.0.56:8848
namespace: f648524d-0a7b-449e-8f92-64e05236fd51 namespace: 9cde1ce1-98bc-4b9c-9213-f1fbf8a5b3cc
config: config:
# 配置中心地址 # 配置中心地址
server-addr: 192.168.0.14:8848 server-addr: 192.168.0.56:8848
namespace: f648524d-0a7b-449e-8f92-64e05236fd51 namespace: 9cde1ce1-98bc-4b9c-9213-f1fbf8a5b3cc
# 配置文件格式 # 配置文件格式
file-extension: yml file-extension: yml
# 共享配置 # 共享配置

View File

@ -12,16 +12,14 @@ spring:
active: dev active: dev
cloud: cloud:
nacos: nacos:
username: nacos
password: nacos
discovery: discovery:
# 服务注册地址 # 服务注册地址
server-addr: 192.168.0.14:8848 server-addr: 192.168.0.56:8848
namespace: f648524d-0a7b-449e-8f92-64e05236fd51 namespace: 9cde1ce1-98bc-4b9c-9213-f1fbf8a5b3cc
config: config:
# 配置中心地址 # 配置中心地址
server-addr: 192.168.0.14:8848 server-addr: 192.168.0.56:8848
namespace: f648524d-0a7b-449e-8f92-64e05236fd51 namespace: 9cde1ce1-98bc-4b9c-9213-f1fbf8a5b3cc
# 配置文件格式 # 配置文件格式
file-extension: yml file-extension: yml
# 共享配置 # 共享配置

View File

@ -16,15 +16,13 @@ spring:
active: dev active: dev
cloud: cloud:
nacos: nacos:
username: nacos
password: nacos
discovery: discovery:
# 服务注册地址 # 服务注册地址
server-addr: 192.168.0.14:8848 server-addr: 192.168.0.56:8848
namespace: f648524d-0a7b-449e-8f92-64e05236fd51 namespace: f648524d-0a7b-449e-8f92-64e05236fd51
config: config:
# 配置中心地址 # 配置中心地址
server-addr: 192.168.0.14:8848 server-addr: 192.168.0.56:8848
namespace: f648524d-0a7b-449e-8f92-64e05236fd51 namespace: f648524d-0a7b-449e-8f92-64e05236fd51
# 配置文件格式 # 配置文件格式
file-extension: yml file-extension: yml

View File

@ -16,16 +16,14 @@ spring:
active: dev active: dev
cloud: cloud:
nacos: nacos:
username: nacos
password: nacos
discovery: discovery:
# 服务注册地址 # 服务注册地址
server-addr: 192.168.0.14:8848 server-addr: 192.168.0.56:8848
namespace: f648524d-0a7b-449e-8f92-64e05236fd51 namespace: 9cde1ce1-98bc-4b9c-9213-f1fbf8a5b3cc
config: config:
# 配置中心地址 # 配置中心地址
server-addr: 192.168.0.14:8848 server-addr: 192.168.0.56:8848
namespace: f648524d-0a7b-449e-8f92-64e05236fd51 namespace: 9cde1ce1-98bc-4b9c-9213-f1fbf8a5b3cc
# 配置文件格式 # 配置文件格式
file-extension: yml file-extension: yml
# 共享配置 # 共享配置

View File

@ -15,16 +15,14 @@ spring:
active: dev active: dev
cloud: cloud:
nacos: nacos:
username: nacos
password: nacos
discovery: discovery:
# 服务注册地址 # 服务注册地址
server-addr: 192.168.0.14:8848 server-addr: 192.168.0.56:8848
namespace: f648524d-0a7b-449e-8f92-64e05236fd51 namespace: 9cde1ce1-98bc-4b9c-9213-f1fbf8a5b3cc
config: config:
# 配置中心地址 # 配置中心地址
server-addr: 192.168.0.14:8848 server-addr: 192.168.0.56:8848
namespace: f648524d-0a7b-449e-8f92-64e05236fd51 namespace: 9cde1ce1-98bc-4b9c-9213-f1fbf8a5b3cc
# 配置文件格式 # 配置文件格式
file-extension: yml file-extension: yml
# 共享配置 # 共享配置

View File

@ -12,22 +12,16 @@ spring:
active: dev active: dev
cloud: cloud:
nacos: nacos:
username: nacos
password: nacos
discovery: discovery:
# 服务注册地址 # 服务注册地址
server-addr: 192.168.0.14:8848 server-addr: 192.168.0.14:8848
namespace: f0e6fc14-465e-4268-adc8-cb33c3d4d755 namespace: 9404b13b-4b90-4759-98c7-f5d7a670ffd8
config: config:
# 配置中心地址 # 配置中心地址
server-addr: 192.168.0.14:8848 server-addr: 192.168.0.14:8848
namespace: f0e6fc14-465e-4268-adc8-cb33c3d4d755 namespace: 9404b13b-4b90-4759-98c7-f5d7a670ffd8
# 配置文件格式 # 配置文件格式
file-extension: yml file-extension: yml
# 共享配置 # 共享配置
shared-configs: shared-configs:
- application-${spring.profiles.active}.${spring.cloud.nacos.config.file-extension} - application-${spring.profiles.active}.${spring.cloud.nacos.config.file-extension}
system:
supports:
phoneLogin: true
emailLogin: true

View File

@ -70,7 +70,7 @@
<appender-ref ref="adminLog"/> <appender-ref ref="adminLog"/>
</logger> </logger>
<logger name="com.bonus.system" level="DEBUG" additivity="true"> <logger name="com.bonus.system" level="info" additivity="true">
<appender-ref ref="sqlLog"/> <appender-ref ref="sqlLog"/>
</logger> </logger>

View File

@ -12,16 +12,14 @@ spring:
active: dev active: dev
cloud: cloud:
nacos: nacos:
username: nacos
password: nacos
discovery: discovery:
# 服务注册地址 # 服务注册地址
server-addr: 192.168.0.14:8848 server-addr: 192.168.0.56:8848
namespace: f648524d-0a7b-449e-8f92-64e05236fd51 namespace: 9cde1ce1-98bc-4b9c-9213-f1fbf8a5b3cc
config: config:
# 配置中心地址 # 配置中心地址
server-addr: 192.168.0.14:8848 server-addr: 192.168.0.56:8848
namespace: f648524d-0a7b-449e-8f92-64e05236fd51 namespace: 9cde1ce1-98bc-4b9c-9213-f1fbf8a5b3cc
# 配置文件格式 # 配置文件格式
file-extension: yml file-extension: yml
# 共享配置 # 共享配置

View File

@ -1,3 +1,10 @@
# 创建 bonus 用户,此段代码未测试
RUN group add -g 1002 bonus && \
useradd -u 1002 -g 1002 -m -s /usr/sbin/nologin bonus
# 切换到 bonus 用户
USER bonus
# end 创建用户
# 基础镜像 # 基础镜像
FROM openjdk:8-jre FROM openjdk:8-jre
# author # author

View File

@ -1,3 +1,10 @@
# 创建 bonus 用户,此段代码未测试
RUN group add -g 1002 bonus && \
useradd -u 1002 -g 1002 -m -s /usr/sbin/nologin bonus
# 切换到 bonus 用户
USER bonus
# end 创建用户
# 基础镜像 # 基础镜像
FROM openjdk:8-jre FROM openjdk:8-jre
# author # author

View File

@ -1,3 +1,10 @@
# 创建 bonus 用户,此段代码未测试
RUN group add -g 1002 bonus && \
useradd -u 1002 -g 1002 -m -s /usr/sbin/nologin bonus
# 切换到 bonus 用户
USER bonus
# end 创建用户
# 基础镜像 # 基础镜像
FROM openjdk:8-jre FROM openjdk:8-jre
# author # author

View File

@ -1,3 +1,10 @@
# 创建 bonus 用户,此段代码未测试
RUN group add -g 1002 bonus && \
useradd -u 1002 -g 1002 -m -s /usr/sbin/nologin bonus
# 切换到 bonus 用户
USER bonus
# end 创建用户
# 基础镜像 # 基础镜像
FROM openjdk:8-jre FROM openjdk:8-jre
# author # author

View File

@ -1,3 +1,10 @@
# 创建 bonus 用户,此段代码未测试
RUN group add -g 1002 bonus && \
useradd -u 1002 -g 1002 -m -s /usr/sbin/nologin bonus
# 切换到 bonus 用户
USER bonus
# end 创建用户
# 基础镜像 # 基础镜像
FROM openjdk:8-jre FROM openjdk:8-jre
# author # author

View File

@ -1,3 +1,10 @@
# 创建 bonus 用户,此段代码未测试
RUN group add -g 1002 bonus && \
useradd -u 1002 -g 1002 -m -s /usr/sbin/nologin bonus
# 切换到 bonus 用户
USER bonus
# end 创建用户
# 基础镜像 # 基础镜像
FROM openjdk:8-jre FROM openjdk:8-jre
# author # author

View File

@ -1,3 +1,10 @@
# 创建 bonus 用户,此段代码未测试
RUN group add -g 1002 bonus && \
useradd -u 1002 -g 1002 -m -s /usr/sbin/nologin bonus
# 切换到 bonus 用户
USER bonus
# end 创建用户
# 基础镜像 # 基础镜像
FROM openjdk:8-jre FROM openjdk:8-jre
# author # author

View File

@ -2,7 +2,7 @@ version : '3.8'
services: services:
bonus-nacos: bonus-nacos:
container_name: bonus-nacos container_name: bonus-nacos
image: nacos/nacos-server image: nacos/nacos-server:2.2.3
build: build:
context: ./nacos context: ./nacos
environment: environment:

View File

@ -2,7 +2,7 @@ spring.datasource.platform=mysql
db.num=1 db.num=1
db.url.0=jdbc:mysql://bonus-mysql:3306/ry-config?characterEncoding=utf8&connectTimeout=1000&socketTimeout=3000&autoReconnect=true&useUnicode=true&useSSL=false&serverTimezone=UTC db.url.0=jdbc:mysql://bonus-mysql:3306/ry-config?characterEncoding=utf8&connectTimeout=1000&socketTimeout=3000&autoReconnect=true&useUnicode=true&useSSL=false&serverTimezone=UTC
db.user=root db.user=root
db.password=password #db.password=password
nacos.naming.empty-service.auto-clean=true nacos.naming.empty-service.auto-clean=true
nacos.naming.empty-service.clean.initial-delay-ms=50000 nacos.naming.empty-service.clean.initial-delay-ms=50000

View File

@ -12,8 +12,6 @@ spring:
active: dev active: dev
cloud: cloud:
nacos: nacos:
username: nacos
password: nacos
discovery: discovery:
# 服务注册地址 # 服务注册地址
server-addr: 192.168.0.56:8848 server-addr: 192.168.0.56:8848

View File

@ -12,8 +12,6 @@ spring:
active: dev active: dev
cloud: cloud:
nacos: nacos:
username: nacos
password: nacos
discovery: discovery:
# 服务注册地址 # 服务注册地址
server-addr: 192.168.0.56:8848 server-addr: 192.168.0.56:8848

View File

@ -13,8 +13,6 @@ spring:
active: dev active: dev
cloud: cloud:
nacos: nacos:
username: nacos
password: nacos
discovery: discovery:
# 服务注册地址 # 服务注册地址
server-addr: 192.168.0.56:8848 server-addr: 192.168.0.56:8848
@ -38,8 +36,6 @@ spring:
datasource: datasource:
ds1: ds1:
nacos: nacos:
username: nacos
password: nacos
server-addr: 192.168.0.56:8848 server-addr: 192.168.0.56:8848
namespace: 9cde1ce1-98bc-4b9c-9213-f1fbf8a5b3cc namespace: 9cde1ce1-98bc-4b9c-9213-f1fbf8a5b3cc
dataId: sentinel-bonus-gateway dataId: sentinel-bonus-gateway

View File

@ -12,8 +12,6 @@ spring:
active: dev active: dev
cloud: cloud:
nacos: nacos:
username: nacos
password: nacos
discovery: discovery:
# 服务注册地址 # 服务注册地址
server-addr: 192.168.0.56:8848 server-addr: 192.168.0.56:8848

View File

@ -12,8 +12,6 @@ spring:
active: dev active: dev
cloud: cloud:
nacos: nacos:
username: nacos
password: nacos
discovery: discovery:
# 服务注册地址 # 服务注册地址
server-addr: 192.168.0.56:8848 server-addr: 192.168.0.56:8848

View File

@ -12,8 +12,6 @@ spring:
active: dev active: dev
cloud: cloud:
nacos: nacos:
username: nacos
password: nacos
discovery: discovery:
# 服务注册地址 # 服务注册地址
server-addr: 192.168.0.56:8848 server-addr: 192.168.0.56:8848

View File

@ -12,8 +12,6 @@ spring:
active: dev active: dev
cloud: cloud:
nacos: nacos:
username: nacos
password: nacos
discovery: discovery:
# 服务注册地址 # 服务注册地址
server-addr: 192.168.0.56:8848 server-addr: 192.168.0.56:8848