Spring Cloud Security监控示例-安全度量指标示例

@Component
public class SecurityMetrics {

  private final MeterRegistry meterRegistry;

  private final Counter loginCounter;
  private final Timer sessionTimer;

  public SecurityMetrics(MeterRegistry meterRegistry) {
    this.meterRegistry = meterRegistry;

    loginCounter = Counter.builder("login.count")
      .description("Number of user login events")
      .register(meterRegistry);

    sessionTimer = Timer.builder("session.time")
      .description("Duration of user sessions")
      .register(meterRegistry);
  }

  public void recordLogin() {
    loginCounter.increment();
  }

  public Timer.Sample startSessionTimer() {
    return Timer.start(meterRegistry);
  }

  public void endSessionTimer(Timer.Sample sample) {
    sample.stop(sessionTimer);
  }

}

@Configuration
@EnableWebSecurity
@EnablePrometheusMetrics
public class SecurityConfig extends WebSecurityConfigurerAdapter {

  @Autowired
  private SecurityMetrics securityMetrics;

  @Override
  protected void configure(HttpSecurity http) throws Exception {
    http
      .authorizeRequests()
        .antMatchers("/public/**").permitAll()
        .anyRequest().authenticated()
        .and()
      .formLogin()
        .loginPage("/login")
        .successHandler(new MetricsAuthenticationSuccessHandler(securityMetrics))
        .failureHandler(new MetricsAuthenticationFailureHandler(securityMetrics))
        .permitAll()
        .and()
      .logout()
        .logoutSuccessUrl("/login?logout")
        .permitAll()
      .and()
      .csrf().disable();
  }

  @Autowired
  public void configureGlobal(AuthenticationManagerBuilder auth) throws Exception {
    auth
      .inMemoryAuthentication()
        .withUser("user").password("{noop}password").roles("USER")
        .and()
        .withUser("admin").password("{noop}password").roles("USER", "ADMIN");
  }

}