bonus
/
Bonus-Cloud
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases 2 Wiki Activity

解决安全漏洞

This commit is contained in:
weiweiw 2024-08-01 13:30:44 +08:00
parent ff8fd57c16
commit 00a653222a
32 changed files with 128 additions and 117 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
bonus-auth/src/main/resources/bootstrap.yml
View File

@ -12,16 +12,14 @@ spring:
active: dev
cloud:
nacos:
username: nacos
password: nacos
discovery:
# 服务注册地址
server-addr: 192.168.0.14:8848
namespace: f648524d-0a7b-449e-8f92-64e05236fd51
namespace: 9404b13b-4b90-4759-98c7-f5d7a670ffd8
config:
# 配置中心地址
server-addr: 192.168.0.14:8848
namespace: f648524d-0a7b-449e-8f92-64e05236fd51
namespace: 9404b13b-4b90-4759-98c7-f5d7a670ffd8
# 配置文件格式
file-extension: yml
# 共享配置
@ -32,3 +30,4 @@ spring:
jasypt:
encryptor:
password: Encrypt

22
bonus-common/bonus-common-core/src/main/java/com/bonus/common/core/utils/encryption/AesCbcUtils.java
View File

@ -78,17 +78,17 @@ public class AesCbcUtils {
return null;
}
public static void main(String[] args) {
// String json="";
String json="{\"username\":\"guest\",\"password\":\"admin@123\"}";
String data=encrypt(json);
System.err.println(data);
String jm=decrypt("\"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\"");
String jiemi=decrypt(data);
System.err.println(jm);
System.err.println(jiemi);
}
// public static void main(String[] args) {
// // String json="";
//
// String json="{\"username\":\"guest\",\"password\":\"admin@123\"}";
// String data=encrypt(json);
// System.err.println(data);
// String jm=decrypt("\"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\"");
// String jiemi=decrypt(data);
// System.err.println(jm);
// System.err.println(jiemi);
// }
/**
* AES解密

16
bonus-common/bonus-common-core/src/main/java/com/bonus/common/core/utils/encryption/Sm2Util.java
View File

@ -31,14 +31,14 @@ public class Sm2Util {
return HexUtil.encodeHexStr(BCUtil.encodeECPrivateKey(sm2.getPrivateKey()));
}
public static void main(String[] args) {
String privateKey = getPrivateKey();
String publicKey = getPublicKey();
String msg= encrypt(publicKey,"1234567890");
// String msg2= decrypt(privateKey,msg);
System.err.println(msg);
// System.err.println(msg2);
}
// public static void main(String[] args) {
// String privateKey = getPrivateKey();
// String publicKey = getPublicKey();
// String msg= encrypt(publicKey,"1234567890");
//// String msg2= decrypt(privateKey,msg);
// System.err.println(msg);
//// System.err.println(msg2);
// }
/**
* 加密
*公钥加密

10
bonus-common/bonus-common-core/src/main/java/com/bonus/common/core/utils/encryption/Sm3Util.java
View File

@ -15,11 +15,11 @@ public class Sm3Util {
static SM3 sm3 = SmUtil.sm3WithSalt("2cc0c5f9f1749f1632efa9f63e902323".getBytes(StandardCharsets.UTF_8));
public static void main(String[] args) {
String msg= encrypt("1234567890");
System.err.println(msg);
}
// public static void main(String[] args) {
//
// String msg= encrypt("1234567890");
// System.err.println(msg);
// }
public static String encrypt(String data) {
return Sm3Util.sm3.digestHex(data);

10
bonus-common/bonus-common-core/src/main/java/com/bonus/common/core/utils/encryption/Sm4Utils.java
View File

@ -47,10 +47,10 @@ public class Sm4Utils {
}
public static void main(String[] args) {
String msg= encode("1234567890");
System.err.println(msg);
}
// public static void main(String[] args) {
// String msg= encode("1234567890");
// System.err.println(msg);
//
// }
}

11
bonus-gateway/src/main/java/com/bonus/gateway/BonusGatewayApplication.java
View File

@ -25,10 +25,13 @@ public class BonusGatewayApplication implements CommandLineRunner {
private StringEncryptor encryptor;
@Override
public void run(String... args) throws Exception {
// String nacos = encrypt("Jjsp@nacos2023" );
// String mogodb = encrypt("Bonus@admin123!" );
// System.err.println( "nacos原始明文密码加密后的结果为：" + nacos );
// System.err.println( "mogodb原始明文密码加密后的结果为：" + mogodb );
String nacos = encrypt("Jjsp@nacos2023" );
String mogodb = encrypt("Bonus@admin123!" );
System.err.println( "nacos原始明文密码加密后的结果为：" + nacos );
System.err.println( "mogodb原始明文密码加密后的结果为：" + mogodb );
// String string = decrypt("ENC(b8K5x5rjN7qdGdmhgzFayK/P6ZVbC/UNBHjx2SBJkoqU149aXRtJsFhDZcgpckFf)");
// System.err.println( "明文结果为：" + string );
}
private String encrypt( String originPassord ) {

18
bonus-gateway/src/main/resources/bootstrap.yml
View File

@ -13,16 +13,14 @@ spring:
active: dev
cloud:
nacos:
username: nacos
password: ENC(b8K5x5rjN7qdGdmhgzFayK/P6ZVbC/UNBHjx2SBJkoqU149aXRtJsFhDZcgpckFf)
discovery:
# 服务注册地址
server-addr: 192.168.0.14:8848
namespace: f0e6fc14-465e-4268-adc8-cb33c3d4d755
namespace: 9404b13b-4b90-4759-98c7-f5d7a670ffd8
config:
# 配置中心地址
server-addr: 192.168.0.14:8848
namespace: f0e6fc14-465e-4268-adc8-cb33c3d4d755
namespace: 9404b13b-4b90-4759-98c7-f5d7a670ffd8
# 配置文件格式
file-extension: yml
# 共享配置
@ -38,20 +36,18 @@ spring:
datasource:
ds1:
nacos:
username: nacos
password: nacos
server-addr: 192.168.0.14:8848
namespace: f648524d-0a7b-449e-8f92-64e05236fd51
namespace: 9404b13b-4b90-4759-98c7-f5d7a670ffd8
dataId: sentinel-bonus-gateway
groupId: DEFAULT_GROUP
data-type: json
rule-type: gw-flow
#系统 自动 加解密开关
system:
encryptEnabled: true
decryptEnabled: true
##系统 自动 加解密开关
#system:
# encryptEnabled: false
# decryptEnabled: false
#加密组件
jasypt:
encryptor:

10
bonus-modules/bonus-file/src/main/resources/bootstrap.yml
View File

@ -12,16 +12,14 @@ spring:
active: dev
cloud:
nacos:
username: nacos
password: nacos
discovery:
# 服务注册地址
server-addr: 192.168.0.14:8848
namespace: f648524d-0a7b-449e-8f92-64e05236fd51
server-addr: 192.168.0.56:8848
namespace: 9cde1ce1-98bc-4b9c-9213-f1fbf8a5b3cc
config:
# 配置中心地址
server-addr: 192.168.0.14:8848
namespace: f648524d-0a7b-449e-8f92-64e05236fd51
server-addr: 192.168.0.56:8848
namespace: 9cde1ce1-98bc-4b9c-9213-f1fbf8a5b3cc
# 配置文件格式
file-extension: yml
# 共享配置

10
bonus-modules/bonus-gen/src/main/resources/bootstrap.yml
View File

@ -12,16 +12,14 @@ spring:
active: dev
cloud:
nacos:
username: nacos
password: nacos
discovery:
# 服务注册地址
server-addr: 192.168.0.14:8848
namespace: f648524d-0a7b-449e-8f92-64e05236fd51
server-addr: 192.168.0.56:8848
namespace: 9cde1ce1-98bc-4b9c-9213-f1fbf8a5b3cc
config:
# 配置中心地址
server-addr: 192.168.0.14:8848
namespace: f648524d-0a7b-449e-8f92-64e05236fd51
server-addr: 192.168.0.56:8848
namespace: 9cde1ce1-98bc-4b9c-9213-f1fbf8a5b3cc
# 配置文件格式
file-extension: yml
# 共享配置

10
bonus-modules/bonus-job/src/main/resources/bootstrap.yml
View File

@ -12,16 +12,14 @@ spring:
active: dev
cloud:
nacos:
username: nacos
password: nacos
discovery:
# 服务注册地址
server-addr: 192.168.0.14:8848
namespace: f648524d-0a7b-449e-8f92-64e05236fd51
server-addr: 192.168.0.56:8848
namespace: 9cde1ce1-98bc-4b9c-9213-f1fbf8a5b3cc
config:
# 配置中心地址
server-addr: 192.168.0.14:8848
namespace: f648524d-0a7b-449e-8f92-64e05236fd51
server-addr: 192.168.0.56:8848
namespace: 9cde1ce1-98bc-4b9c-9213-f1fbf8a5b3cc
# 配置文件格式
file-extension: yml
# 共享配置

6
bonus-modules/bonus-mongodb/src/main/resources/bootstrap.yml
View File

@ -16,15 +16,13 @@ spring:
active: dev
cloud:
nacos:
username: nacos
password: nacos
discovery:
# 服务注册地址
server-addr: 192.168.0.14:8848
server-addr: 192.168.0.56:8848
namespace: f648524d-0a7b-449e-8f92-64e05236fd51
config:
# 配置中心地址
server-addr: 192.168.0.14:8848
server-addr: 192.168.0.56:8848
namespace: f648524d-0a7b-449e-8f92-64e05236fd51
# 配置文件格式
file-extension: yml

10
bonus-modules/bonus-obs/src/main/resources/bootstrap.yml
View File

@ -16,16 +16,14 @@ spring:
active: dev
cloud:
nacos:
username: nacos
password: nacos
discovery:
# 服务注册地址
server-addr: 192.168.0.14:8848
namespace: f648524d-0a7b-449e-8f92-64e05236fd51
server-addr: 192.168.0.56:8848
namespace: 9cde1ce1-98bc-4b9c-9213-f1fbf8a5b3cc
config:
# 配置中心地址
server-addr: 192.168.0.14:8848
namespace: f648524d-0a7b-449e-8f92-64e05236fd51
server-addr: 192.168.0.56:8848
namespace: 9cde1ce1-98bc-4b9c-9213-f1fbf8a5b3cc
# 配置文件格式
file-extension: yml
# 共享配置

10
bonus-modules/bonus-oss/src/main/resources/bootstrap.yml
View File

@ -15,16 +15,14 @@ spring:
active: dev
cloud:
nacos:
username: nacos
password: nacos
discovery:
# 服务注册地址
server-addr: 192.168.0.14:8848
namespace: f648524d-0a7b-449e-8f92-64e05236fd51
server-addr: 192.168.0.56:8848
namespace: 9cde1ce1-98bc-4b9c-9213-f1fbf8a5b3cc
config:
# 配置中心地址
server-addr: 192.168.0.14:8848
namespace: f648524d-0a7b-449e-8f92-64e05236fd51
server-addr: 192.168.0.56:8848
namespace: 9cde1ce1-98bc-4b9c-9213-f1fbf8a5b3cc
# 配置文件格式
file-extension: yml
# 共享配置

10
bonus-modules/bonus-system/src/main/resources/bootstrap.yml
View File

@ -12,22 +12,16 @@ spring:
active: dev
cloud:
nacos:
username: nacos
password: nacos
discovery:
# 服务注册地址
server-addr: 192.168.0.14:8848
namespace: f0e6fc14-465e-4268-adc8-cb33c3d4d755
namespace: 9404b13b-4b90-4759-98c7-f5d7a670ffd8
config:
# 配置中心地址
server-addr: 192.168.0.14:8848
namespace: f0e6fc14-465e-4268-adc8-cb33c3d4d755
namespace: 9404b13b-4b90-4759-98c7-f5d7a670ffd8
# 配置文件格式
file-extension: yml
# 共享配置
shared-configs:
- application-${spring.profiles.active}.${spring.cloud.nacos.config.file-extension}
system:
supports:
phoneLogin: true
emailLogin: true

2
bonus-modules/bonus-system/src/main/resources/logback.xml
View File

@ -70,7 +70,7 @@
<appender-ref ref="adminLog"/>
</logger>
<logger name="com.bonus.system" level="DEBUG" additivity="true">
<logger name="com.bonus.system" level="info" additivity="true">
<appender-ref ref="sqlLog"/>
</logger>

10
bonus-visual/bonus-monitor/src/main/resources/bootstrap.yml
View File

@ -12,16 +12,14 @@ spring:
active: dev
cloud:
nacos:
username: nacos
password: nacos
discovery:
# 服务注册地址
server-addr: 192.168.0.14:8848
namespace: f648524d-0a7b-449e-8f92-64e05236fd51
server-addr: 192.168.0.56:8848
namespace: 9cde1ce1-98bc-4b9c-9213-f1fbf8a5b3cc
config:
# 配置中心地址
server-addr: 192.168.0.14:8848
namespace: f648524d-0a7b-449e-8f92-64e05236fd51
server-addr: 192.168.0.56:8848
namespace: 9cde1ce1-98bc-4b9c-9213-f1fbf8a5b3cc
# 配置文件格式
file-extension: yml
# 共享配置

7
docker/bonus/auth/dockerfile
View File

@ -1,3 +1,10 @@
# 创建 bonus 用户，此段代码未测试
RUN group add -g 1002 bonus && \
useradd -u 1002 -g 1002 -m -s /usr/sbin/nologin bonus
# 切换到 bonus 用户
USER bonus
# end 创建用户
# 基础镜像
FROM openjdk:8-jre
# author

7
docker/bonus/gateway/dockerfile
View File

@ -1,3 +1,10 @@
# 创建 bonus 用户，此段代码未测试
RUN group add -g 1002 bonus && \
useradd -u 1002 -g 1002 -m -s /usr/sbin/nologin bonus
# 切换到 bonus 用户
USER bonus
# end 创建用户
# 基础镜像
FROM openjdk:8-jre
# author

7
docker/bonus/modules/file/dockerfile
View File

@ -1,3 +1,10 @@
# 创建 bonus 用户，此段代码未测试
RUN group add -g 1002 bonus && \
useradd -u 1002 -g 1002 -m -s /usr/sbin/nologin bonus
# 切换到 bonus 用户
USER bonus
# end 创建用户
# 基础镜像
FROM openjdk:8-jre
# author

7
docker/bonus/modules/gen/dockerfile
View File

@ -1,3 +1,10 @@
# 创建 bonus 用户，此段代码未测试
RUN group add -g 1002 bonus && \
useradd -u 1002 -g 1002 -m -s /usr/sbin/nologin bonus
# 切换到 bonus 用户
USER bonus
# end 创建用户
# 基础镜像
FROM openjdk:8-jre
# author

7
docker/bonus/modules/job/dockerfile
View File

@ -1,3 +1,10 @@
# 创建 bonus 用户，此段代码未测试
RUN group add -g 1002 bonus && \
useradd -u 1002 -g 1002 -m -s /usr/sbin/nologin bonus
# 切换到 bonus 用户
USER bonus
# end 创建用户
# 基础镜像
FROM openjdk:8-jre
# author

7
docker/bonus/modules/system/dockerfile
View File

@ -1,3 +1,10 @@
# 创建 bonus 用户，此段代码未测试
RUN group add -g 1002 bonus && \
useradd -u 1002 -g 1002 -m -s /usr/sbin/nologin bonus
# 切换到 bonus 用户
USER bonus
# end 创建用户
# 基础镜像
FROM openjdk:8-jre
# author

7
docker/bonus/visual/monitor/dockerfile
View File

@ -1,3 +1,10 @@
# 创建 bonus 用户，此段代码未测试
RUN group add -g 1002 bonus && \
useradd -u 1002 -g 1002 -m -s /usr/sbin/nologin bonus
# 切换到 bonus 用户
USER bonus
# end 创建用户
# 基础镜像
FROM openjdk:8-jre
# author

2
docker/docker-compose.yml
View File

@ -2,7 +2,7 @@ version : '3.8'
services:
bonus-nacos:
container_name: bonus-nacos
image: nacos/nacos-server
image: nacos/nacos-server:2.2.3
build:
context: ./nacos
environment:

2
docker/nacos/conf/application.properties
View File

@ -2,7 +2,7 @@ spring.datasource.platform=mysql
db.num=1
db.url.0=jdbc:mysql://bonus-mysql:3306/ry-config?characterEncoding=utf8&connectTimeout=1000&socketTimeout=3000&autoReconnect=true&useUnicode=true&useSSL=false&serverTimezone=UTC
db.user=root
db.password=password
#db.password=password
nacos.naming.empty-service.auto-clean=true
nacos.naming.empty-service.clean.initial-delay-ms=50000

2
scripts/auth_bootstrap.yml
View File

@ -12,8 +12,6 @@ spring:
active: dev
cloud:
nacos:
username: nacos
password: nacos
discovery:
# 服务注册地址
server-addr: 192.168.0.56:8848

2
scripts/file_bootstrap.yml
View File

@ -12,8 +12,6 @@ spring:
active: dev
cloud:
nacos:
username: nacos
password: nacos
discovery:
# 服务注册地址
server-addr: 192.168.0.56:8848

4
scripts/gateway_bootstrap.yml
View File

@ -13,8 +13,6 @@ spring:
active: dev
cloud:
nacos:
username: nacos
password: nacos
discovery:
# 服务注册地址
server-addr: 192.168.0.56:8848
@ -38,8 +36,6 @@ spring:
datasource:
ds1:
nacos:
username: nacos
password: nacos
server-addr: 192.168.0.56:8848
namespace: 9cde1ce1-98bc-4b9c-9213-f1fbf8a5b3cc
dataId: sentinel-bonus-gateway

2
scripts/gen_bootstrap.yml
View File

@ -12,8 +12,6 @@ spring:
active: dev
cloud:
nacos:
username: nacos
password: nacos
discovery:
# 服务注册地址
server-addr: 192.168.0.56:8848

2
scripts/job_bootstrap.yml
View File

@ -12,8 +12,6 @@ spring:
active: dev
cloud:
nacos:
username: nacos
password: nacos
discovery:
# 服务注册地址
server-addr: 192.168.0.56:8848

2
scripts/system_bootstrap.yml
View File

@ -12,8 +12,6 @@ spring:
active: dev
cloud:
nacos:
username: nacos
password: nacos
discovery:
# 服务注册地址
server-addr: 192.168.0.56:8848

2
scripts/visual_bootstrap.yml
View File

@ -12,8 +12,6 @@ spring:
active: dev
cloud:
nacos:
username: nacos
password: nacos
discovery:
# 服务注册地址
server-addr: 192.168.0.56:8848