用户加密漏洞

2024-05-23 19:48:15 +08:00 · 2024-05-23 19:48:15 +08:00 · 9d2d1bb152
parent 513ac105c8
commit 9d2d1bb152
13 changed files with 44 additions and 21 deletions
--- a/pom.xml
+++ b/pom.xml
@ -181,6 +181,11 @@
                <version>${sgzb.version}</version>
            </dependency>

+            <dependency>
+                <groupId>com.alibaba.cloud</groupId>
+                <artifactId>spring-cloud-starter-alibaba-nacos-config</artifactId>
+            </dependency>
+
            <!-- 日志记录 -->
            <dependency>
                <groupId>com.bonus.sgzb</groupId>
--- a/sgzb-auth/src/main/resources/bootstrap.yml
+++ b/sgzb-auth/src/main/resources/bootstrap.yml
@ -14,17 +14,19 @@ spring:
    nacos:
      discovery:
        # 服务注册地址
-        server-addr: 127.0.0.1:8848
+        server-addr: 172.16.36.33:8848
        namespace: sgzb_cloud_dev
      config:
        # 配置中心地址
-        server-addr: 127.0.0.1:8848
+        server-addr: 172.16.36.33:8848
        namespace: sgzb_cloud_dev
        # 配置文件格式
        file-extension: yml
        # 共享配置
        shared-configs:
          - application-${spring.profiles.active}.${spring.cloud.nacos.config.file-extension}
+        username: nacos
+        password: N2$NjW2&CDEOx$mD*y5h

 onlineApprove: /lbcloud-oauth/oauth/token
 wechatAppId: crhmaxnE
--- a/sgzb-gateway/src/main/resources/bootstrap.yml
+++ b/sgzb-gateway/src/main/resources/bootstrap.yml
@ -27,17 +27,19 @@ spring:
    nacos:
      discovery:
        # 服务注册地址
-        server-addr: 127.0.0.1:8848
+        server-addr: 172.16.36.33:8848
        namespace: sgzb_cloud_dev
      config:
        # 配置中心地址
-        server-addr: 127.0.0.1:8848
+        server-addr: 172.16.36.33:8848
        namespace: sgzb_cloud_dev
        # 配置文件格式
        file-extension: yml
        # 共享配置
        shared-configs:
          - application-${spring.profiles.active}.${spring.cloud.nacos.config.file-extension}
+        username: nacos
+        password: N2$NjW2&CDEOx$mD*y5h
    sentinel:
      # 取消控制台懒加载
      eager: true
--- a/sgzb-modules/sgzb-base/src/main/java/com/bonus/sgzb/SgzbBaseApplication.java
+++ b/sgzb-modules/sgzb-base/src/main/java/com/bonus/sgzb/SgzbBaseApplication.java
@ -13,7 +13,7 @@ import org.springframework.boot.autoconfigure.jdbc.DataSourceAutoConfiguration;
 * 
 * @author ruoyi
 */
-@EnableCustomSwagger2
+//@EnableCustomSwagger2
@SpringBootApplication(exclude = {DataSourceAutoConfiguration.class})
@EnableCustomConfig
@EnableRyFeignClients
--- a/sgzb-modules/sgzb-base/src/main/resources/bootstrap.yml
+++ b/sgzb-modules/sgzb-base/src/main/resources/bootstrap.yml
@ -21,17 +21,19 @@ spring:
    nacos:
      discovery:
        # 服务注册地址
-        server-addr: 127.0.0.1:8848
+        server-addr: 172.16.36.33:8848
        namespace: sgzb_cloud_dev
      config:
        # 配置中心地址
-        server-addr: 127.0.0.1:8848
+        server-addr: 172.16.36.33:8848
        namespace: sgzb_cloud_dev
        # 配置文件格式
        file-extension: yml
        # 共享配置
        shared-configs:
          - application-${spring.profiles.active}.${spring.cloud.nacos.config.file-extension}
+        username: nacos
+        password: N2$NjW2&CDEOx$mD*y5h

 # 禁用Actuator端点的未经身份验证的访问
 management:
--- a/sgzb-modules/sgzb-file/src/main/resources/bootstrap.yml
+++ b/sgzb-modules/sgzb-file/src/main/resources/bootstrap.yml
@ -36,14 +36,16 @@ spring:
    nacos:
      discovery:
        # 服务注册地址
-        server-addr: 192.168.0.14:8848
+        server-addr: 172.16.36.33:8848
        namespace: sgzb_cloud_dev
      config:
        # 配置中心地址
-        server-addr: 192.168.0.14:8848
+        server-addr: 172.16.36.33:8848
        namespace: sgzb_cloud_dev
        # 配置文件格式
        file-extension: yml
        # 共享配置
        shared-configs:
          - application-${spring.profiles.active}.${spring.cloud.nacos.config.file-extension}
+        username: nacos
+        password: N2$NjW2&CDEOx$mD*y5h
--- a/sgzb-modules/sgzb-gen/src/main/resources/bootstrap.yml
+++ b/sgzb-modules/sgzb-gen/src/main/resources/bootstrap.yml
@ -14,14 +14,16 @@ spring:
    nacos:
      discovery:
        # 服务注册地址
-        server-addr: 192.168.0.14:8848
+        server-addr: 172.16.36.33:8848
        namespace: sgzb_cloud_dev
      config:
        # 配置中心地址
-        server-addr: 192.168.0.14:8848
+        server-addr: 172.16.36.33:8848
        namespace: sgzb_cloud_dev
        # 配置文件格式
        file-extension: yml
        # 共享配置
        shared-configs:
          - application-${spring.profiles.active}.${spring.cloud.nacos.config.file-extension}
+        username: nacos
+        password: N2$NjW2&CDEOx$mD*y5h
--- a/sgzb-modules/sgzb-job/src/main/resources/bootstrap.yml
+++ b/sgzb-modules/sgzb-job/src/main/resources/bootstrap.yml
@ -14,14 +14,16 @@ spring:
    nacos:
      discovery:
        # 服务注册地址
-        server-addr: 192.168.0.14:8848
+        server-addr: 172.16.36.33:8848
        namespace: sgzb_cloud_dev
      config:
        # 配置中心地址
-        server-addr: 192.168.0.14:8848
+        server-addr: 172.16.36.33:8848
        namespace: sgzb_cloud_dev
        # 配置文件格式
        file-extension: yml
        # 共享配置
        shared-configs:
          - application-${spring.profiles.active}.${spring.cloud.nacos.config.file-extension}
+        username: nacos
+        password: N2$NjW2&CDEOx$mD*y5h
--- a/sgzb-modules/sgzb-material/src/main/java/com/bonus/sgzb/material/SgzbMaterialApplication.java
+++ b/sgzb-modules/sgzb-material/src/main/java/com/bonus/sgzb/material/SgzbMaterialApplication.java
@ -13,7 +13,7 @@ import org.springframework.boot.autoconfigure.jdbc.DataSourceAutoConfiguration;
 * 
 * @author ruoyi
 */
-@EnableCustomSwagger2
+//@EnableCustomSwagger2
@SpringBootApplication(exclude = {DataSourceAutoConfiguration.class})
@EnableCustomConfig
@EnableRyFeignClients
--- a/sgzb-modules/sgzb-material/src/main/resources/bootstrap.yml
+++ b/sgzb-modules/sgzb-material/src/main/resources/bootstrap.yml
@ -21,17 +21,19 @@ spring:
    nacos:
      discovery:
        # 服务注册地址
-        server-addr: 127.0.0.1:8848
+        server-addr: 172.16.36.33:8848
        namespace: sgzb_cloud_dev
      config:
        # 配置中心地址
-        server-addr: 127.0.0.1:8848
+        server-addr: 172.16.36.33:8848
        namespace: sgzb_cloud_dev
        # 配置文件格式
        file-extension: yml
        # 共享配置
        shared-configs:
          - application-${spring.profiles.active}.${spring.cloud.nacos.config.file-extension}
+        username: nacos
+        password: N2$NjW2&CDEOx$mD*y5h

 # 禁用Actuator端点的未经身份验证的访问
 management:
--- a/sgzb-modules/sgzb-settlement/src/main/resources/bootstrap.yml
+++ b/sgzb-modules/sgzb-settlement/src/main/resources/bootstrap.yml
@ -14,14 +14,16 @@ spring:
    nacos:
      discovery:
        # 服务注册地址
-        server-addr: 192.168.0.14:8848
+        server-addr: 172.16.36.33:8848
        namespace: sgzb_cloud_dev
      config:
        # 配置中心地址
-        server-addr: 192.168.0.14:8848
+        server-addr: 172.16.36.33:8848
        namespace: sgzb_cloud_dev
        # 配置文件格式
        file-extension: yml
        # 共享配置
        shared-configs:
          - application-${spring.profiles.active}.${spring.cloud.nacos.config.file-extension}
+        username: nacos
+        password: N2$NjW2&CDEOx$mD*y5h
--- a/sgzb-modules/sgzb-system/src/main/java/com/bonus/sgzb/system/SgzbSystemApplication.java
+++ b/sgzb-modules/sgzb-system/src/main/java/com/bonus/sgzb/system/SgzbSystemApplication.java
@ -12,7 +12,7 @@ import com.bonus.sgzb.common.swagger.annotation.EnableCustomSwagger2;
 * @author ruoyi
 */
@EnableCustomConfig
-@EnableCustomSwagger2
+//@EnableCustomSwagger2
@EnableRyFeignClients
@SpringBootApplication
 public class SgzbSystemApplication
--- a/sgzb-modules/sgzb-system/src/main/resources/bootstrap.yml
+++ b/sgzb-modules/sgzb-system/src/main/resources/bootstrap.yml
@ -25,17 +25,19 @@ spring:
    nacos:
      discovery:
        # 服务注册地址
-        server-addr: 127.0.0.1:8848
+        server-addr: 172.16.36.33:8848
        namespace: sgzb_cloud_dev
      config:
        # 配置中心地址
-        server-addr: 127.0.0.1:8848
+        server-addr: 172.16.36.33:8848
        namespace: sgzb_cloud_dev
        # 配置文件格式
        file-extension: yml
        # 共享配置
        shared-configs:
          - application-${spring.profiles.active}.${spring.cloud.nacos.config.file-extension}
+        username: nacos
+        password: N2$NjW2&CDEOx$mD*y5h
 #腾讯云sms
 tencent:
  sms: