网站设计公司 中山,延吉制作网站,网站怎样做谷歌推广,专业搜索服务网络公司文章目录一、漏洞修复1. 未授权访问漏洞2. 解决方案3. 修复效果图二、403 异常解决2.1. 版本对照2.2. 线上采用版本2.3. yml文件配置2.4. pom依赖2.5. 效果图一、漏洞修复
1. 未授权访问漏洞
前因#xff1a;政府项目被扫出nacos未授权访问漏洞
2. 解决方案
在nacos/conf…
文章目录一、漏洞修复1. 未授权访问漏洞2. 解决方案3. 修复效果图二、403 异常解决2.1. 版本对照2.2. 线上采用版本2.3. yml文件配置2.4. pom依赖2.5. 效果图一、漏洞修复
1. 未授权访问漏洞
前因政府项目被扫出nacos未授权访问漏洞
2. 解决方案
在nacos/conf/application.properties nacos开启权限认证配置
nacos.core.auth.enabledtrue3. 修复效果图
添加用户 http://127.0.0.1:8848/nacos/v1/auth/users/?usernametestpasswordtest 可以看到不使用鉴权就可以访问到用户信息 http://127.0.0.1:8848/nacos/v1/auth/users/?pageNo1pageSize9
二、403 异常解决 现象开启nacos.core.auth.enabledtrue然后重启nacos发现权限果然好用了但是在启动java应用时无法连接nacos服务端报403错误。 2.1. 版本对照
先阅读-版本说明
2.2. 线上采用版本
Spring Cloud Alibaba VersionSpring Cloud VersionSpring Boot VersionNacos Version2.2.7.RELEASESpring Cloud Hoxton.SR122.3.12.RELEASE2.0.3
2.3. yml文件配置
bootstrap.yml
# Tomcat
server:port: 8080# Spring
spring:application:# 应用名称name: ly-gatewayprofiles:# 环境配置active: devcloud:nacos:discovery:# nacos 认证密码username: nacos# nacos 认证密码password: kwx_!2022O^# 服务注册地址server-addr: 127.0.0.1:8848config:# 配置中心地址server-addr: 127.0.0.1:8848# nacos 认证用户username: nacos# nacos 认证密码password: kwx_!2022O^# 配置文件格式file-extension: yml# 共享配置shared-configs:- application-${spring.profiles.active}.${spring.cloud.nacos.config.file-extension}
2.4. pom依赖 ?xml version1.0 encodingUTF-8?
project xmlnshttp://maven.apache.org/POM/4.0.0 xmlns:xsihttp://www.w3.org/2001/XMLSchema-instancexsi:schemaLocationhttp://maven.apache.org/POM/4.0.0 https://maven.apache.org/xsd/maven-4.0.0.xsdmodelVersion4.0.0/modelVersiongroupIdcom.gblfy/groupIdartifactIdnacos/artifactIdversion1.0.0/versionparentgroupIdorg.springframework.boot/groupIdartifactIdspring-boot-starter-parent/artifactIdversion2.3.12.RELEASE/versionrelativePath//parentpropertiesspring-cloud.versionHoxton.SR12/spring-cloud.versionspring-cloud-alibaba.version2.2.7.RELEASE/spring-cloud-alibaba.versionnacos-client.version2.0.3/nacos-client.version/propertiesdependenciesdependencygroupIdorg.springframework.boot/groupIdartifactIdspring-boot-starter-web/artifactId/dependencydependencygroupIdorg.springframework.boot/groupIdartifactIdspring-boot-starter-actuator/artifactId/dependency!--服务注册发现--dependencygroupIdcom.alibaba.cloud/groupIdartifactIdspring-cloud-starter-alibaba-nacos-discovery/artifactIdexclusionsexclusiongroupIdcom.alibaba.nacos/groupIdartifactIdnacos-client/artifactId/exclusion/exclusions/dependency!--配置管理--dependencygroupIdcom.alibaba.cloud/groupIdartifactIdspring-cloud-starter-alibaba-nacos-config/artifactIdexclusionsexclusiongroupIdcom.alibaba.nacos/groupIdartifactIdnacos-client/artifactId/exclusion/exclusions/dependencydependencygroupIdcom.alibaba.nacos/groupIdartifactIdnacos-client/artifactIdversion${nacos-client.version}/version/dependency/dependenciesdependencyManagementdependencies!-- SpringCloud 微服务 --dependencygroupIdorg.springframework.cloud/groupIdartifactIdspring-cloud-dependencies/artifactIdversion${spring-cloud.version}/versiontypepom/typescopeimport/scope/dependency!-- SpringCloud Alibaba 微服务 --dependencygroupIdcom.alibaba.cloud/groupIdartifactIdspring-cloud-alibaba-dependencies/artifactIdversion${spring-cloud-alibaba.version}/versiontypepom/typescopeimport/scope/dependency/dependencies/dependencyManagementbuildpluginsplugingroupIdorg.springframework.boot/groupIdartifactIdspring-boot-maven-plugin/artifactId/plugin/plugins/build/project
2.5. 效果图
