2 Star 3 Fork 1

siliver / siliver_admin

加入 Gitee
与超过 1200万 开发者一起发现、参与优秀开源项目,私有仓库也完全免费 :)
免费加入
克隆/下载
贡献代码
同步代码
取消
提示: 由于 Git 不支持空文件夾,创建文件夹后会生成空的 .keep 文件
Loading...
README
Artistic-2.0

siliver_admin

2024-01-25 修改

1.springboot升级到3.2.2

2023-12-26 修改

1.springboot升级到3.2.0 2.springcloud升级到2023.0.0,如果未升级,openfeign则不兼容 3.mybatis-plus-boot-starter更换为mybatis-plus-spring-boot3-starter,为兼容springboot3.2.0 4.mybatis-spring3.0.3版本才兼容springboot3.2.0,需要进行修改 5.jjwt升级到0.12.3,部分API更新,请注意

  1. 通用后台架构
  1. springboot
  2. undertow(更换为默认的tomcat,因tomcat已经修复了安全问题,每个web容器都有自己的优缺点,所以更换为默认的web容器)
  3. security
  4. open-ui
  5. mybatis-plus
  6. redis,redisson
  7. springcloud
  8. openFeign
  9. nacos(Deprecated,更换为单体服务)
  10. mysql
  11. fastjson
  12. jjwt
  13. lombok
  14. mongodb
  15. flyway(Deprecated,待之后更新)
  16. sentinel(Deprecated)
  17. mica-ip2region
  18. UserAgentUtils(Deprecated)
  1. 权限

通过application.yml 的自定义 custom.security节点配置。 white是白名单,skip是跳过验证的接口列表,dynamic是动态角色权限验证(name是角色名称,url是权限配置路径)。

HttpSecurity一些方法在security6中已经修改,百度查询时请注意security5之前,security5,security6配置信息会有一些修改

在token验证的同时会生成用户编号,用户ID 和userAgent分析。如果想要所有接口都要分析userAgent,请自行迁移方法。

用户权限体系是 用户->用户组->角色 这套经典的维护体系。

security API又经历了变更,使用时注意

  1. 数据库初始化(Deprecated)

数据库初始化执行采用flyway,配置信息类为 org.springframework.boot.autoconfigure.flyway.FlywayProperties。如需自定义,请参考该类的注释 (暂时不使用)

mysql-connector-java包已经迁移到mysql-connector-j

  1. 日志

输入输出日志采用切面进行记录,只切了controller接口,定位目录为Controller。如果不修改切面,请将新建的controller放置到controller目录中。
全局异常使用@RestControllerAdvice进行接口异常的捕获。

  1. hashredis

添加了HashRedisTemplate的bean,可以直接注入使用(已删除,之后替换为RedisTemplate)

  1. xss攻击防御

通过继承HttpServletRequestWrapper,实现简单的xss攻击防御

  1. redission锁进行防幂等攻击

通过实现HandlerInterceptor和自定义的Annotation Idempotent进行接口判断,通过redission进行枷锁,通过ConcurrentHashMap进行所记录并在postHandle 中进行解锁。(实验方案,后续在全局异常切面中再次进行解锁的验证)

  1. 工具类

目前工具类包括:

  1. CustomRandomUtils:随机数字,字母数字,颜色的方法;
  2. JwtTokenUtils:创建token,验证token,验证refeshtoken,获取用户名称,获取用户角色,验证过期的方法;(使用的是jjwt,不是java-jwt)
  3. SecurityStringUtils:html标签过滤,前端关键字过滤,sql关键字过滤(未完善)的方法
  1. 数据库链接池

连接池没选用druid,使用自带的hikari,如有需要druid的,请自行添加依赖

  1. 限流(Deprecated)

限流使用了sentinel,需要自行下载服务端,并在项目中添加配置信息。项目中已经引用了spring-cloud-starter-alibaba-sentinel。

11.文档

原springdoc-openapi-ui 迁移到 springdoc-openapi-starter-webmvc-ui

  1. user-Agent(Deprecated)

使用UserAgentUtils 进行 user-Agent分析(因版本老旧且暂时用处不大,废弃)

  1. mica-ip2region

使用mica-ip2region做了离线IP地址解析的接口小工具

  1. 微信小程序登录接口
  1. pdf,word(Deprecated) 文档上传下载接口
  1. 娱乐(Deprecated)

对接了优启蒙的免费接口(废弃)

  1. 文件转换(Deprecated)

使用spire.doc.free进行doc转docx;(Deprecated) 使用documents4j进行word转pdf(Deprecated) (windows使用OFFICE本地服务;linux使用openOffice); 使用pdfbox,fontbox,jodconverter进行格式修改。

The Artistic License 2.0 Copyright (c) 2000-2006, The Perl Foundation. Everyone is permitted to copy and distribute verbatim copies of this license document, but changing it is not allowed. Preamble This license establishes the terms under which a given free software Package may be copied, modified, distributed, and/or redistributed. The intent is that the Copyright Holder maintains some artistic control over the development of that Package while still keeping the Package available as open source and free software. You are always permitted to make arrangements wholly outside of this license directly with the Copyright Holder of a given Package. If the terms of this license do not permit the full use that you propose to make of the Package, you should contact the Copyright Holder and seek a different licensing arrangement. Definitions "Copyright Holder" means the individual(s) or organization(s) named in the copyright notice for the entire Package. "Contributor" means any party that has contributed code or other material to the Package, in accordance with the Copyright Holder's procedures. "You" and "your" means any person who would like to copy, distribute, or modify the Package. "Package" means the collection of files distributed by the Copyright Holder, and derivatives of that collection and/or of those files. A given Package may consist of either the Standard Version, or a Modified Version. "Distribute" means providing a copy of the Package or making it accessible to anyone else, or in the case of a company or organization, to others outside of your company or organization. "Distributor Fee" means any fee that you charge for Distributing this Package or providing support for this Package to another party. It does not mean licensing fees. "Standard Version" refers to the Package if it has not been modified, or has been modified only in ways explicitly requested by the Copyright Holder. "Modified Version" means the Package, if it has been changed, and such changes were not explicitly requested by the Copyright Holder. "Original License" means this Artistic License as Distributed with the Standard Version of the Package, in its current version or as it may be modified by The Perl Foundation in the future. "Source" form means the source code, documentation source, and configuration files for the Package. "Compiled" form means the compiled bytecode, object code, binary, or any other form resulting from mechanical transformation or translation of the Source form. Permission for Use and Modification Without Distribution (1) You are permitted to use the Standard Version and create and use Modified Versions for any purpose without restriction, provided that you do not Distribute the Modified Version. Permissions for Redistribution of the Standard Version (2) You may Distribute verbatim copies of the Source form of the Standard Version of this Package in any medium without restriction, either gratis or for a Distributor Fee, provided that you duplicate all of the original copyright notices and associated disclaimers. At your discretion, such verbatim copies may or may not include a Compiled form of the Package. (3) You may apply any bug fixes, portability changes, and other modifications made available from the Copyright Holder. The resulting Package will still be considered the Standard Version, and as such will be subject to the Original License. Distribution of Modified Versions of the Package as Source (4) You may Distribute your Modified Version as Source (either gratis or for a Distributor Fee, and with or without a Compiled form of the Modified Version) provided that you clearly document how it differs from the Standard Version, including, but not limited to, documenting any non-standard features, executables, or modules, and provided that you do at least ONE of the following: (a) make the Modified Version available to the Copyright Holder of the Standard Version, under the Original License, so that the Copyright Holder may include your modifications in the Standard Version. (b) ensure that installation of your Modified Version does not prevent the user installing or running the Standard Version. In addition, the Modified Version must bear a name that is different from the name of the Standard Version. (c) allow anyone who receives a copy of the Modified Version to make the Source form of the Modified Version available to others under (i) the Original License or (ii) a license that permits the licensee to freely copy, modify and redistribute the Modified Version using the same licensing terms that apply to the copy that the licensee received, and requires that the Source form of the Modified Version, and of any works derived from it, be made freely available in that license fees are prohibited but Distributor Fees are allowed. Distribution of Compiled Forms of the Standard Version or Modified Versions without the Source (5) You may Distribute Compiled forms of the Standard Version without the Source, provided that you include complete instructions on how to get the Source of the Standard Version. Such instructions must be valid at the time of your distribution. If these instructions, at any time while you are carrying out such distribution, become invalid, you must provide new instructions on demand or cease further distribution. If you provide valid instructions or cease distribution within thirty days after you become aware that the instructions are invalid, then you do not forfeit any of your rights under this license. (6) You may Distribute a Modified Version in Compiled form without the Source, provided that you comply with Section 4 with respect to the Source of the Modified Version. Aggregating or Linking the Package (7) You may aggregate the Package (either the Standard Version or Modified Version) with other packages and Distribute the resulting aggregation provided that you do not charge a licensing fee for the Package. Distributor Fees are permitted, and licensing fees for other components in the aggregation are permitted. The terms of this license apply to the use and Distribution of the Standard or Modified Versions as included in the aggregation. (8) You are permitted to link Modified and Standard Versions with other works, to embed the Package in a larger work of your own, or to build stand-alone binary or bytecode versions of applications that include the Package, and Distribute the result without restriction, provided the result does not expose a direct interface to the Package. Items That are Not Considered Part of a Modified Version (9) Works (including, but not limited to, modules and scripts) that merely extend or make use of the Package, do not, by themselves, cause the Package to be a Modified Version. In addition, such works are not considered parts of the Package itself, and are not subject to the terms of this license. General Provisions (10) Any use, modification, and distribution of the Standard or Modified Versions is governed by this Artistic License. By using, modifying or distributing the Package, you accept this license. Do not use, modify, or distribute the Package, if you do not accept this license. (11) If your Modified Version has been derived from a Modified Version made by someone other than you, you are nevertheless required to ensure that your Modified Version complies with the requirements of this license. (12) This license does not grant you the right to use any trademark, service mark, tradename, or logo of the Copyright Holder. (13) This license includes the non-exclusive, worldwide, free-of-charge patent license to make, have made, use, offer to sell, sell, import and otherwise transfer the Package with respect to any patent claims licensable by the Copyright Holder that are necessarily infringed by the Package. If you institute patent litigation (including a cross-claim or counterclaim) against any party alleging that the Package constitutes direct or contributory patent infringement, then this Artistic License to you shall terminate on the date that such litigation is filed. (14) Disclaimer of Warranty: THE PACKAGE IS PROVIDED BY THE COPYRIGHT HOLDER AND CONTRIBUTORS "AS IS' AND WITHOUT ANY EXPRESS OR IMPLIED WARRANTIES. THE IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, OR NON-INFRINGEMENT ARE DISCLAIMED TO THE EXTENT PERMITTED BY YOUR LOCAL LAW. UNLESS REQUIRED BY LAW, NO COPYRIGHT HOLDER OR CONTRIBUTOR WILL BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, OR CONSEQUENTIAL DAMAGES ARISING IN ANY WAY OUT OF THE USE OF THE PACKAGE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.

简介

开箱即用的后台管理服务 展开 收起
Java
Artistic-2.0
取消

贡献者

全部

近期动态

加载更多
不能加载更多了
Java
1
https://gitee.com/SiliverSunShine/siliver_admin.git
git@gitee.com:SiliverSunShine/siliver_admin.git
SiliverSunShine
siliver_admin
siliver_admin
master

搜索帮助