Java爬坑 -- SpringBoot + Swagger2 整合遇到的权限问题

Posted 2020-11-18 杨康是个大坏蛋

tags:

篇首语：本文由小常识网(cha138.com)小编为大家整理，主要介绍了Java爬坑 -- SpringBoot + Swagger2 整合遇到的权限问题相关的知识，希望对你有一定的参考价值。

问题一 : 项目除了登录之外,其他接口都需要认证权限

通过度娘和谷歌发现有两种方式可以解决:

1. 通过给每一个接口配置一个全局的认证参数:

 1 package com.dongsport.configuration;
 2 
 3 import org.springframework.context.annotation.Bean;
 4 import org.springframework.context.annotation.Configuration;
 5 import org.springframework.web.context.request.async.DeferredResult;
 6 import springfox.documentation.builders.ApiInfoBuilder;
 7 import springfox.documentation.builders.ParameterBuilder;
 8 import springfox.documentation.builders.PathSelectors;
 9 import springfox.documentation.schema.ModelRef;
10 import springfox.documentation.service.ApiInfo;
11 import springfox.documentation.service.Contact;
12 import springfox.documentation.service.Parameter;
13 import springfox.documentation.spi.DocumentationType;
14 import springfox.documentation.spring.web.plugins.Docket;
15 import springfox.documentation.swagger2.annotations.EnableSwagger2;
16 
17 import java.util.ArrayList;
18 import java.util.List;
19 
20 /**
21  * @ClassName SwaggerConfigurer
22  * @Description Swagger2 配置文件
23  * @Author Q_先生
24  * @Date 2018/4/27 15:01
25  **/
26 @Configuration
27 @EnableSwagger2
28 public class SwaggerConfiguration {
29     @Bean
30     public Docket createRestApi() {
31 
32         //添加head参数start
33         ParameterBuilder tokenPar = new ParameterBuilder();
34         List<Parameter> pars = new ArrayList<>();
35         tokenPar.name("Authorization")
36                 .description("令牌(登录后获取令牌)")
37                 .modelRef(new ModelRef("string"))
38                 .parameterType("header")
39                 .required(false)
40                 .build();
41         pars.add(tokenPar.build());
42         //添加head参数end
43 
44         return new Docket(DocumentationType.SWAGGER_2)
45                 .genericModelSubstitutes(DeferredResult.class)
46                 .useDefaultResponseMessages(false)
47                 .forCodeGeneration(false)
48                 .pathMapping("")
49                 .select()
50                 // TODO 如果是线上环境，添加路径过滤，设置为全部都不符合
51                 // .paths(PathSelectors.none())
52                 .build()
53                 .globalOperationParameters(pars)
54                 .apiInfo(productApiInfo());
55     }
56 
57     private ApiInfo productApiInfo() {
58         return new ApiInfoBuilder()
59                 .title("使用Swagger2构建RESTful APIs")
60                 .description("物华天宝 , 龙光射牛斗之墟 \\r" +
61                         "人杰地灵 , 徐孺下陈蕃之榻")
62                 .termsOfServiceUrl("www.baidu.com")
63                 .contact(new Contact("Q_先生", "www.baidu.com", "邮箱"))
64                 .version("1.0")
65                 .build();
66     }
67 }

2.使用SecurityScheme和SecurityContext支持配置Swagger以访问我们的安全API ：

 1 package com.dongsport.configuration;
 2 
 3 import org.springframework.context.annotation.Bean;
 4 import org.springframework.context.annotation.Configuration;
 5 import springfox.documentation.builders.ApiInfoBuilder;
 6 import springfox.documentation.builders.PathSelectors;
 7 import springfox.documentation.builders.RequestHandlerSelectors;
 8 import springfox.documentation.service.*;
 9 import springfox.documentation.spi.DocumentationType;
10 import springfox.documentation.spi.service.contexts.SecurityContext;
11 import springfox.documentation.spring.web.plugins.Docket;
12 import springfox.documentation.swagger2.annotations.EnableSwagger2;
13 
14 import java.util.List;
15 
16 import static com.google.common.collect.Lists.newArrayList;
17 
18 /**
19  * @ClassName SwaggerConfigurer
20  * @Description Swagger2 配置文件
21  * @Author Q_先生
22  * @Date 2018/4/27 15:01
23  **/
24 @Configuration
25 @EnableSwagger2
26 public class SwaggerConfiguration {
27 
28     @Bean
29     public Docket createRestApi() {
30 
31         return new Docket(DocumentationType.SWAGGER_2).
32                 useDefaultResponseMessages(false)
33                 .select()
34                 .apis(RequestHandlerSelectors.any())
35                 .paths(PathSelectors.regex("^(?!auth).*$"))
36                 .build()
37                 .apiInfo(productApiInfo())
38                 .securitySchemes(securitySchemes())
39                 .securityContexts(securityContexts())
40                 ;
41 
42     }
43 
44     private List<ApiKey> securitySchemes() {
45         return newArrayList(
46                 new ApiKey("Authorization", "Authorization", "header"));
47     }
48 
49     private List<SecurityContext> securityContexts() {
50         return newArrayList(
51                 SecurityContext.builder()
52                         .securityReferences(defaultAuth())
53                         .forPaths(PathSelectors.regex("^(?!auth).*$"))
54                         .build()
55         );
56     }
57 
58     List<SecurityReference> defaultAuth() {
59         AuthorizationScope authorizationScope = new AuthorizationScope("global", "accessEverything");
60         AuthorizationScope[] authorizationScopes = new AuthorizationScope[1];
61         authorizationScopes[0] = authorizationScope;
62         return newArrayList(
63                 new SecurityReference("Authorization", authorizationScopes));
64     }
65 
66     private ApiInfo productApiInfo() {
67         return new ApiInfoBuilder()
68                 .title("使用Swagger2构建RESTful APIs")
69                 .description("物华天宝 , 龙光射牛斗之墟 \\r" +
70                         "人杰地灵 , 徐孺下陈蕃之榻")
71                 .termsOfServiceUrl("www.baidu.com")
72                 .contact(new Contact("Q_先生", "www.baidu.com", "邮箱"))
73                 .version("1.0")
74                 .build();
75     }
76 }