解决安全漏扫问题

cloud-research-service/src/main/java/com/yizhi/research/application/ResearchApplication.java

 package com.yizhi.research.application;
 package com.yizhi.research.application;
 
 
+import com.yizhi.core.application.security.config.SpringSecurityConfig;
 import org.springframework.boot.SpringApplication;
 import org.springframework.boot.SpringApplication;
 import org.springframework.boot.autoconfigure.SpringBootApplication;
 import org.springframework.boot.autoconfigure.SpringBootApplication;
 import org.springframework.boot.autoconfigure.amqp.RabbitAutoConfiguration;
 import org.springframework.boot.autoconfigure.amqp.RabbitAutoConfiguration;
 import org.springframework.cloud.client.discovery.EnableDiscoveryClient;
 import org.springframework.cloud.client.discovery.EnableDiscoveryClient;
 import org.springframework.cloud.openfeign.EnableFeignClients;
 import org.springframework.cloud.openfeign.EnableFeignClients;
+import org.springframework.context.annotation.Bean;
 import org.springframework.context.annotation.ComponentScan;
 import org.springframework.context.annotation.ComponentScan;
+import org.springframework.context.annotation.DependsOn;
 
 
 @SpringBootApplication(exclude = {RabbitAutoConfiguration.class})
 @SpringBootApplication(exclude = {RabbitAutoConfiguration.class})
 @EnableDiscoveryClient
 @EnableDiscoveryClient
@@ -16,5 +19,9 @@ public class ResearchApplication {
     public static void main(String[] args) {
     public static void main(String[] args) {
         SpringApplication.run(ResearchApplication.class, args);
         SpringApplication.run(ResearchApplication.class, args);
     }
     }
+    @Bean
 
 
+    public SpringSecurityConfig springSecurityConfig(){
+        return new SpringSecurityConfig();
+    }
 }
 }

cloud-research-service/src/main/java/com/yizhi/research/application/SwaggerConfig.java

@@ -6,11 +6,14 @@ import org.springframework.context.annotation.Configuration;
 import springfox.documentation.builders.ApiInfoBuilder;
 import springfox.documentation.builders.ApiInfoBuilder;
 import springfox.documentation.builders.PathSelectors;
 import springfox.documentation.builders.PathSelectors;
 import springfox.documentation.builders.RequestHandlerSelectors;
 import springfox.documentation.builders.RequestHandlerSelectors;
-import springfox.documentation.service.ApiInfo;
+import springfox.documentation.service.*;
 import springfox.documentation.spi.DocumentationType;
 import springfox.documentation.spi.DocumentationType;
+import springfox.documentation.spi.service.contexts.SecurityContext;
 import springfox.documentation.spring.web.plugins.Docket;
 import springfox.documentation.spring.web.plugins.Docket;
 import springfox.documentation.swagger2.annotations.EnableSwagger2;
 import springfox.documentation.swagger2.annotations.EnableSwagger2;
 
 
+import java.util.Collections;
+
 @Configuration
 @Configuration
 //@EnableSwagger2
 //@EnableSwagger2
 public class SwaggerConfig {
 public class SwaggerConfig {
@@ -25,6 +28,20 @@ public class SwaggerConfig {
                 .select()
                 .select()
                 .apis(RequestHandlerSelectors.basePackage("com.fulan.application"))
                 .apis(RequestHandlerSelectors.basePackage("com.fulan.application"))
                 .paths(PathSelectors.any())
                 .paths(PathSelectors.any())
+                .build()
+                .securitySchemes(Collections.singletonList(securitySchema()))
+                .securityContexts(Collections.singletonList(securityContext()));
+    }
+
+    private SecurityScheme securitySchema() {
+        return new BasicAuth("BasicAuth");
+    }
+
+    private SecurityContext securityContext() {
+        return SecurityContext.builder()
+                .securityReferences(Collections.singletonList(
+                        new SecurityReference("BasicAuth", new AuthorizationScope[] {new AuthorizationScope("global", "accessAll")})))
+                .forPaths(PathSelectors.any())
                 .build();
                 .build();
     }
     }