Spring Cloud 微服务(九）- 集成 Spring Boot Admin

原创

安宁

修改于 2020-07-27 10:08:48

1.9K0

修改于 2020-07-27 10:08:48

文章被收录于专栏：Spring Cloud 微服务Spring Cloud 微服务

本文简单介绍在项目中集成 spring-boot-admin。

SBA(spring-boot-admin) 可简单理解为一个 UI 组件，提供 Endpoint 接口数据的界面展示。

1. 创建项目

创建 peacetrue-microservice-admin-server 项目，作为 eureka 客户端。然后添加依赖 implementation 'de.codecentric:spring-boot-admin-starter-server:2.3.0-SNAPSHOT'，作为 admin 服务端。

2. 改造 Spring Security

Spring Security 默认的登陆页面如下：

Figure 1. 默认的登陆页面

参考 SBA官方文档实现的 Reactive 版本：

WebFluxSecurityConfig

@Bean
public SecurityWebFilterChain springSecurityFilterChain(ServerHttpSecurity http,
                                                        AdminServerProperties adminServer) {
    http.authorizeExchange(exchanges -> exchanges
            .matchers(EndpointRequest.to(HealthEndpoint.class, InfoEndpoint.class)).permitAll()
            .pathMatchers(adminServer.path("/assets/**")).permitAll()
            .pathMatchers(adminServer.path("/login")).permitAll()
            .anyExchange().authenticated()
    );
    http.formLogin()
            .loginPage(adminServer.path("/login"))
            .authenticationSuccessHandler(new RedirectServerAuthenticationSuccessHandler(adminServer.path("/")));
    http.logout().logoutUrl(adminServer.path("/logout"));
    http.httpBasic(withDefaults());
    http.csrf().csrfTokenRepository(CookieServerCsrfTokenRepository.withHttpOnlyFalse())
            .requireCsrfProtectionMatcher(new AndServerWebExchangeMatcher(
                    CsrfWebFilter.DEFAULT_CSRF_MATCHER,
                    new NegatedServerWebExchangeMatcher(EndpointRequest.toAnyEndpoint()),
                    new NegatedServerWebExchangeMatcher(ServerWebExchangeMatchers.pathMatchers(HttpMethod.POST, adminServer.path("/instances"))),
                    new NegatedServerWebExchangeMatcher(ServerWebExchangeMatchers.pathMatchers(HttpMethod.DELETE, adminServer.path("/instances/*"))),
                    new NegatedServerWebExchangeMatcher(ServerWebExchangeMatchers.pathMatchers(adminServer.path("/actuator/*")))
            ));
    return http.build();
}

改造后，SBA 的登陆页面如下：