java - Spring Boot 应用程序端点返回 403
问题描述
我是 Spring Boot 的新手,目前卡住了。我遵循了这个(https://github.com/AppDirect/service-integration-sdk/wiki)教程,因为我想实现一个将自身集成到 AppDirect 中的应用程序。在日志中,我可以看到端点被创建和映射:
2018-10-29 16:32:48.898 INFO 8644 --- [ main] s.w.s.m.m.a.RequestMappingHandlerMapping : Mapped "{[/api/v1/integration/processEvent],methods=[GET],produces=[application/json]}" onto public org.springframework.http.ResponseEntity<com.appdirect.sdk.appmarket.events.APIResult> com.appdirect.sdk.appmarket.events.AppmarketEventController.processEvent(javax.servlet.http.HttpServletRequest,java.lang.String)
但是,当我尝试使用 Browser 或 Http-Requester 访问端点(http://localhost:8080/api/v1/integration/processEvent)时,我得到以下响应:{timestamp":"2018-10-29T08:50: 13.252+0000","status":403,"error":"Forbidden","message":"Access Denied","path":"/api/v1/integration/processEvent"}
我的 application.yml 看起来像这样:
connector.allowed.credentials: very-secure:password
server:
use-forward-headers: true
tomcat:
remote_ip_header: x-forwarded-for
endpoints:
enabled: true
info:
enabled: true
sensitive: false
health:
enabled: true
sensitive: false
time-to-live: 5000
info:
build:
name: @project.name@
description: @project.description@
version: @project.version@
这是我的 Application.java:
package de.....;
import java.nio.charset.Charset;
import java.util.Collections;
import java.util.List;
import org.springframework.boot.SpringApplication;
import org.springframework.http.MediaType;
import org.springframework.http.converter.FormHttpMessageConverter;
import org.springframework.http.converter.HttpMessageConverter;
import org.springframework.web.servlet.config.annotation.WebMvcConfigurerAdapter;
public class Application extends WebMvcConfigurerAdapter {
public static void main(String... args) {
SpringApplication.run(RootConfiguration.class, args);
}
/**
* Hack to make Spring Boot @Controller annotated classed to recognize the 'x-www-form-urlencoded' media type
*
* @param converters
*/
@Override
public void configureMessageConverters(List<HttpMessageConverter<?>> converters) {
FormHttpMessageConverter converter = new FormHttpMessageConverter();
MediaType mediaType = new MediaType("application", "x-www-form-urlencoded", Charset.forName("UTF-8"));
converter.setSupportedMediaTypes(Collections.singletonList(mediaType));
converters.add(converter);
super.configureMessageConverters(converters);
}
}
这是 RootConfiguration.java:
package de.....;
import org.springframework.beans.factory.annotation.Value;
import org.springframework.boot.autoconfigure.EnableAutoConfiguration;
import org.springframework.context.annotation.Bean;
import org.springframework.context.annotation.Configuration;
import org.springframework.context.annotation.Import;
import com.appdirect.sdk.ConnectorSdkConfiguration;
import com.appdirect.sdk.appmarket.DeveloperSpecificAppmarketCredentialsSupplier;
import com.appdirect.sdk.credentials.StringBackedCredentialsSupplier;
import de.....;
@Configuration
@Import({
ConnectorSdkConfiguration.class,
EventHandlersConfiguration.class
})
@EnableAutoConfiguration
public class RootConfiguration {
@Bean
public DeveloperSpecificAppmarketCredentialsSupplier environmentCredentialsSupplier(@Value("${connector.allowed.credentials}") String allowedCredentials) {
return new StringBackedCredentialsSupplier(allowedCredentials);
}
}
感谢任何帮助,因为密集的谷歌搜索没有帮助。提前致谢。
解决方案
添加以下类并在 Application.java 中注册它解决了我的问题:
package de.......;
import org.springframework.context.annotation.Configuration;
import org.springframework.core.annotation.Order;
import org.springframework.security.config.annotation.web.builders.HttpSecurity;
import org.springframework.security.config.annotation.web.configuration.EnableWebSecurity;
import org.springframework.security.config.annotation.web.configuration.WebSecurityConfigurerAdapter;
@Configuration
@EnableWebSecurity
@Order(1)
public class SecurityConfiguration extends WebSecurityConfigurerAdapter {
@Override
protected void configure(HttpSecurity httpSecurity) throws Exception {
httpSecurity.authorizeRequests().antMatchers("/").permitAll();
}
}
推荐阅读
- javascript - 如何在Javascript中用双反斜杠替换单反斜杠
- ruby-on-rails - 如何将数据中的值从“是”和“否”更改为其他数据在rails中确认
- swift - 快速将用户数据保存到 Firebase 时出错
- node.js - 不使用 jest-mongodb 预设运行的 Jest 测试
- python - 数据类型 intp 有什么用?
- python - 在 Python 中,我们可以在列表、元组、集合、字典等数据结构上使用位运算符吗?如果是这样,为什么?
- django - eb create 时出错 - “NoneType”类型的参数不可迭代
- ruby - 如何删除ruby中的重复时间
- mysql - 用于在 mySQL 表中插入批处理的 nodejs 代码的更改
- docker - 容器 docker & Kubernetes apache tomcat 8.5.56 http status 404