解决安全漏扫问题

cloud-sign/src/main/java/com/yizhi/application/SignApplication.java

 package com.yizhi.application;
 package com.yizhi.application;
 
 
+import com.yizhi.core.application.security.config.SpringSecurityConfig;
 import org.springframework.boot.SpringApplication;
 import org.springframework.boot.SpringApplication;
 import org.springframework.boot.autoconfigure.SpringBootApplication;
 import org.springframework.boot.autoconfigure.SpringBootApplication;
 import org.springframework.boot.autoconfigure.amqp.RabbitAutoConfiguration;
 import org.springframework.boot.autoconfigure.amqp.RabbitAutoConfiguration;
 import org.springframework.cloud.client.discovery.EnableDiscoveryClient;
 import org.springframework.cloud.client.discovery.EnableDiscoveryClient;
 import org.springframework.cloud.openfeign.EnableFeignClients;
 import org.springframework.cloud.openfeign.EnableFeignClients;
+import org.springframework.context.annotation.Bean;
 import org.springframework.context.annotation.ComponentScan;
 import org.springframework.context.annotation.ComponentScan;
 import org.springframework.context.annotation.ComponentScans;
 import org.springframework.context.annotation.ComponentScans;
+import org.springframework.context.annotation.DependsOn;
 
 
 /**   
 /**   
  * @Author: shengchenglong
  * @Author: shengchenglong
@@ -21,5 +24,9 @@ public class SignApplication {
     public static void main(String[] args) {
     public static void main(String[] args) {
         SpringApplication.run(SignApplication.class, args);
         SpringApplication.run(SignApplication.class, args);
     }
     }
+    @Bean
 
 
+    public SpringSecurityConfig springSecurityConfig(){
+        return new SpringSecurityConfig();
+    }
 }
 }

cloud-sign/src/main/java/com/yizhi/application/SwaggerConfig.java

@@ -11,11 +11,15 @@ import org.springframework.http.ResponseEntity;
 import org.springframework.web.context.request.async.DeferredResult;
 import org.springframework.web.context.request.async.DeferredResult;
 
 
 import springfox.documentation.builders.ApiInfoBuilder;
 import springfox.documentation.builders.ApiInfoBuilder;
-import springfox.documentation.service.ApiInfo;
+import springfox.documentation.builders.PathSelectors;
+import springfox.documentation.service.*;
 import springfox.documentation.spi.DocumentationType;
 import springfox.documentation.spi.DocumentationType;
+import springfox.documentation.spi.service.contexts.SecurityContext;
 import springfox.documentation.spring.web.plugins.Docket;
 import springfox.documentation.spring.web.plugins.Docket;
 import springfox.documentation.swagger2.annotations.EnableSwagger2;
 import springfox.documentation.swagger2.annotations.EnableSwagger2;
 
 
+import java.util.Collections;
+
 @Configuration
 @Configuration
 @EnableSwagger2
 @EnableSwagger2
 public class SwaggerConfig {
 public class SwaggerConfig {
@@ -34,9 +38,22 @@ public class SwaggerConfig {
                 .select()
                 .select()
                 .paths(or(regex("/api.*"),regex("/manage.*"),regex("/remote.*")))
                 .paths(or(regex("/api.*"),regex("/manage.*"),regex("/remote.*")))
                 .build()
                 .build()
-                .apiInfo(apiInfo());
+                .apiInfo(apiInfo())
+                .securitySchemes(Collections.singletonList(securitySchema()))
+                .securityContexts(Collections.singletonList(securityContext()));
+    }
+
+    private SecurityScheme securitySchema() {
+        return new BasicAuth("BasicAuth");
     }
     }
 
 
+    private SecurityContext securityContext() {
+        return SecurityContext.builder()
+                .securityReferences(Collections.singletonList(
+                        new SecurityReference("BasicAuth", new AuthorizationScope[] {new AuthorizationScope("global", "accessAll")})))
+                .forPaths(PathSelectors.any())
+                .build();
+    }
     private ApiInfo apiInfo() {
     private ApiInfo apiInfo() {
         return new ApiInfoBuilder()
         return new ApiInfoBuilder()
             .title("项目签到服务")
             .title("项目签到服务")