SpringBootActuator接口未授权多环境漏洞修复

sgzb-auth/src/main/resources/bootstrap.yml

@@ -42,3 +42,9 @@ getPersonDetailData: /lbcloud-user/api/user/queryById
 registerPhone: /lbcloud-user/api/user/registrationByPhone
 userBindUrl: /lbcloud-authority/api/RoleClient/bindDefaultSystemRole
 verifyPhoneCode: /lbcloud-mbroker/api/broker/simpleVerificationCode
+
+# 禁用Actuator端点的未经身份验证的访问
+management:
+  endpoint:
+    env:
+      enabled: false

sgzb-common/sgzb-common-core/pom.xml

@@ -63,6 +63,7 @@
         <dependency>
             <groupId>com.fasterxml.jackson.core</groupId>
             <artifactId>jackson-databind</artifactId>
+            <version>2.13.5</version>
         </dependency>
 
         <!-- Alibaba Fastjson -->

sgzb-modules/sgzb-base/src/main/resources/bootstrap.yml

@@ -32,3 +32,9 @@ spring:
         # 共享配置
         shared-configs:
           - application-${spring.profiles.active}.${spring.cloud.nacos.config.file-extension}
+
+# 禁用Actuator端点的未经身份验证的访问
+management:
+  endpoint:
+    env:
+      enabled: false

sgzb-modules/sgzb-system/src/main/resources/bootstrap.yml

@@ -67,6 +67,12 @@ tencent:
       # API密钥
       secretkey: OXUgeMo0yhBRTGo6sVu3yiFX4rQtAzc3
 
+# 禁用Actuator端点的未经身份验证的访问
+management:
+  endpoint:
+    env:
+      enabled: false
+