解决安全漏扫问题

cloud-drools-service/src/main/java/com/yizhi/drools/application/CloudDroolsApplication.java

 package com.yizhi.drools.application;
 
+import com.yizhi.core.application.security.config.SpringSecurityConfig;
 import org.springframework.boot.SpringApplication;
 import org.springframework.boot.autoconfigure.SpringBootApplication;
 import org.springframework.boot.autoconfigure.amqp.RabbitAutoConfiguration;
 import org.springframework.cloud.client.discovery.EnableDiscoveryClient;
 import org.springframework.cloud.openfeign.EnableFeignClients;
+import org.springframework.context.annotation.Bean;
 import org.springframework.context.annotation.ComponentScan;
+import org.springframework.context.annotation.DependsOn;
 import org.springframework.transaction.annotation.EnableTransactionManagement;
 
 /**
@@ -22,6 +25,10 @@ public class CloudDroolsApplication {
     public static void main(String[] args) {
         SpringApplication.run(CloudDroolsApplication.class, args);
     }
+    @Bean
 
+    public SpringSecurityConfig springSecurityConfig(){
+        return new SpringSecurityConfig();
+    }
 }
 

cloud-drools-service/src/main/java/com/yizhi/drools/application/SwaggerConfig.java

@@ -8,11 +8,14 @@ import org.springframework.web.servlet.config.annotation.WebMvcConfigurerAdapter
 import springfox.documentation.builders.ApiInfoBuilder;
 import springfox.documentation.builders.PathSelectors;
 import springfox.documentation.builders.RequestHandlerSelectors;
-import springfox.documentation.service.ApiInfo;
+import springfox.documentation.service.*;
 import springfox.documentation.spi.DocumentationType;
+import springfox.documentation.spi.service.contexts.SecurityContext;
 import springfox.documentation.spring.web.plugins.Docket;
 import springfox.documentation.swagger2.annotations.EnableSwagger2;
 
+import java.util.Collections;
+
 /**
  * @Author: shengchenglong
  * @Date: 2018/3/6 14:30
@@ -31,6 +34,20 @@ public class SwaggerConfig extends WebMvcConfigurerAdapter {
                 .select()
                 .apis(RequestHandlerSelectors.basePackage("com.yizhi.drools.application"))
                 .paths(PathSelectors.any())
+                .build()
+                .securitySchemes(Collections.singletonList(securitySchema()))
+                .securityContexts(Collections.singletonList(securityContext()));
+    }
+
+    private SecurityScheme securitySchema() {
+        return new BasicAuth("BasicAuth");
+    }
+
+    private SecurityContext securityContext() {
+        return SecurityContext.builder()
+                .securityReferences(Collections.singletonList(
+                        new SecurityReference("BasicAuth", new AuthorizationScope[] {new AuthorizationScope("global", "accessAll")})))
+                .forPaths(PathSelectors.any())
                 .build();
     }