chenxing
01ce87ed7a
- pom 显式引 spring-boot-starter-data-redis（yh-app-auth 的该依赖是 optional、不传递）； 删掉原先"不引 redis"的注释 - application.yml：去掉 trusted-apps 白名单，改 trust-registry: true —— 共享 Redis sign:app:* 单一真源，凡在 UserBase 注册过的 appKey 自动可验，新增调用方不必再改配置+重启； 并关掉 management.health.redis.enabled（防 Redis 抖动把 /actuator/health 拉成 DOWN 503） - 配套（projman 配置，非本仓）：notice 应用勾选 redis 中间件（注入 SPRING_REDIS_*）+ application-prod.yml 同步去白名单/开 trust-registry。缺任一环都会 fail-closed 到全 401 前置：UserBase 已部署 ①（密钥链落 db0，refreshAll synced=10），flow-center 生产身份 100009 已在 application_info 注册，故回调验签可从注册表解析。
216 lines
8.6 KiB
XML
216 lines
8.6 KiB
XML
<?xml version="1.0" encoding="UTF-8"?>
|
||
<project xmlns="http://maven.apache.org/POM/4.0.0"
|
||
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
|
||
xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/xsd/maven-4.0.0.xsd">
|
||
<modelVersion>4.0.0</modelVersion>
|
||
<parent>
|
||
<groupId>org.springframework.boot</groupId>
|
||
<artifactId>spring-boot-starter-parent</artifactId>
|
||
<version>2.7.18</version>
|
||
<relativePath/> <!-- lookup parent from repository -->
|
||
</parent>
|
||
|
||
<groupId>com.yunhai</groupId>
|
||
<artifactId>notice</artifactId>
|
||
<version>0.0.1</version>
|
||
<name>Notice</name>
|
||
<description>通知公告子应用</description>
|
||
<properties>
|
||
<java.version>1.8</java.version>
|
||
</properties>
|
||
|
||
<dependencyManagement>
|
||
<!-- 基础平台版本管理（含 yh-* 架包与 spring-boot-dependencies 对齐） -->
|
||
<dependencies>
|
||
<dependency>
|
||
<groupId>com.yunhai.platform</groupId>
|
||
<artifactId>yh-platform-dependencies</artifactId>
|
||
<version>1.0.0-SNAPSHOT</version>
|
||
<type>pom</type>
|
||
<scope>import</scope>
|
||
</dependency>
|
||
<!-- Spring Cloud Alibaba（Nacos 配置中心，对齐 Boot 2.7） -->
|
||
<dependency>
|
||
<groupId>com.alibaba.cloud</groupId>
|
||
<artifactId>spring-cloud-alibaba-dependencies</artifactId>
|
||
<version>2021.0.5.0</version>
|
||
<type>pom</type>
|
||
<scope>import</scope>
|
||
</dependency>
|
||
</dependencies>
|
||
</dependencyManagement>
|
||
|
||
<dependencies>
|
||
<dependency>
|
||
<groupId>org.springframework.boot</groupId>
|
||
<artifactId>spring-boot-starter-web</artifactId>
|
||
</dependency>
|
||
<dependency>
|
||
<groupId>org.springframework.boot</groupId>
|
||
<artifactId>spring-boot-starter-validation</artifactId>
|
||
</dependency>
|
||
|
||
<dependency>
|
||
<groupId>org.springframework.boot</groupId>
|
||
<artifactId>spring-boot-starter-data-jpa</artifactId>
|
||
</dependency>
|
||
|
||
<!-- 仅引入 Spring Security 的加密模块（BCryptPasswordEncoder），不引入整套安全框架 -->
|
||
<dependency>
|
||
<groupId>org.springframework.security</groupId>
|
||
<artifactId>spring-security-crypto</artifactId>
|
||
</dependency>
|
||
|
||
<dependency>
|
||
<groupId>org.springframework.boot</groupId>
|
||
<artifactId>spring-boot-devtools</artifactId>
|
||
<scope>runtime</scope>
|
||
<optional>true</optional>
|
||
</dependency>
|
||
|
||
<dependency>
|
||
<groupId>org.springframework.boot</groupId>
|
||
<artifactId>spring-boot-starter-test</artifactId>
|
||
<scope>test</scope>
|
||
</dependency>
|
||
|
||
<!-- Nacos 配置中心（替代 Spring Cloud Config）。Spring Cloud Alibaba 2021.0.5 适配 Spring Boot 2.7 -->
|
||
<dependency>
|
||
<groupId>com.alibaba.cloud</groupId>
|
||
<artifactId>spring-cloud-starter-alibaba-nacos-config</artifactId>
|
||
</dependency>
|
||
<!-- Boot 2.4+ 默认不再处理 bootstrap.yml，需显式引入以继续从 Nacos 拉取配置 -->
|
||
<dependency>
|
||
<groupId>org.springframework.cloud</groupId>
|
||
<artifactId>spring-cloud-starter-bootstrap</artifactId>
|
||
<version>3.1.8</version>
|
||
</dependency>
|
||
|
||
<dependency>
|
||
<groupId>com.mysql</groupId>
|
||
<artifactId>mysql-connector-j</artifactId>
|
||
<scope>runtime</scope>
|
||
</dependency>
|
||
|
||
<dependency>
|
||
<groupId>org.projectlombok</groupId>
|
||
<artifactId>lombok</artifactId>
|
||
<optional>true</optional>
|
||
</dependency>
|
||
|
||
<!-- JSON 序列化（fastjson，主类开启安全模式） -->
|
||
<dependency>
|
||
<groupId>com.alibaba</groupId>
|
||
<artifactId>fastjson</artifactId>
|
||
<version>1.2.80</version>
|
||
</dependency>
|
||
|
||
<!-- Swagger / OpenAPI 文档（springdoc，兼容 Boot 2.7） -->
|
||
<dependency>
|
||
<groupId>org.springdoc</groupId>
|
||
<artifactId>springdoc-openapi-ui</artifactId>
|
||
<version>1.7.0</version>
|
||
</dependency>
|
||
|
||
<!-- 基础平台全家桶（聚合 starter）：认证（CAS/会话/SSO）+ 应用间签名鉴权 + 用户中心静态门面
|
||
+ 统一响应 + actuator 健康探活，一行带齐（模块构成见 BasePlatform/后端项目知识库.md）。
|
||
约定：标准业务服务一律引聚合 starter；平台能力提供方（如 UserBase）按需单引。 -->
|
||
<dependency>
|
||
<groupId>com.yunhai.platform</groupId>
|
||
<artifactId>yh-spring-boot-starter</artifactId>
|
||
</dependency>
|
||
|
||
<!-- CAS 客户端（浏览器 SSO 重定向 / ticket 校验 / getRemoteUser 包装）。
|
||
版本 3.5.1 已在本地 .m2 仓库。 -->
|
||
<dependency>
|
||
<groupId>org.jasig.cas.client</groupId>
|
||
<artifactId>cas-client-core</artifactId>
|
||
<version>3.5.1</version>
|
||
</dependency>
|
||
|
||
<!-- Excel 导入导出（EasyExcel 3.x，注解驱动、流式写入内存友好） -->
|
||
<dependency>
|
||
<groupId>com.alibaba</groupId>
|
||
<artifactId>easyexcel</artifactId>
|
||
<version>3.3.2</version>
|
||
</dependency>
|
||
|
||
<!-- 入站验签走中央密钥链（注册表模式）必须显式引 data-redis：yh-app-auth 的该依赖是
|
||
optional、不传递。副作用是 RedisHealthIndicator 会被装配，故 yml 里关掉
|
||
management.health.redis.enabled，防 Redis 抖动把 /actuator/health 拉成 DOWN(503)。 -->
|
||
<dependency>
|
||
<groupId>org.springframework.boot</groupId>
|
||
<artifactId>spring-boot-starter-data-redis</artifactId>
|
||
</dependency>
|
||
|
||
</dependencies>
|
||
|
||
<build>
|
||
<finalName>notice</finalName>
|
||
<plugins>
|
||
<plugin>
|
||
<groupId>org.apache.maven.plugins</groupId>
|
||
<artifactId>maven-compiler-plugin</artifactId>
|
||
<configuration>
|
||
<!-- 关闭增量编译，避免 Windows 下 maven-status 状态文件被锁导致
|
||
"Error while storing the mojo status / 拒绝访问" -->
|
||
<useIncrementalCompilation>false</useIncrementalCompilation>
|
||
</configuration>
|
||
</plugin>
|
||
<!-- 打可执行 fat jar（Docker 镜像直接 java -jar 启动） -->
|
||
<plugin>
|
||
<groupId>org.springframework.boot</groupId>
|
||
<artifactId>spring-boot-maven-plugin</artifactId>
|
||
<configuration>
|
||
<mainClass>com.yunhai.notice.NoticeApplication</mainClass>
|
||
</configuration>
|
||
<executions>
|
||
<execution>
|
||
<goals>
|
||
<goal>repackage</goal>
|
||
</goals>
|
||
</execution>
|
||
</executions>
|
||
</plugin>
|
||
<!-- 本工程测试命名约定：纯单元 *Test + 集成 *IT（连本地 MySQL），统一由 surefire 执行
|
||
（surefire 默认只匹配 *Test.java，不追加则 *IT 永不执行） -->
|
||
<plugin>
|
||
<groupId>org.apache.maven.plugins</groupId>
|
||
<artifactId>maven-surefire-plugin</artifactId>
|
||
<configuration>
|
||
<includes>
|
||
<include>**/*Test.java</include>
|
||
<include>**/*IT.java</include>
|
||
</includes>
|
||
</configuration>
|
||
</plugin>
|
||
</plugins>
|
||
</build>
|
||
|
||
|
||
<repositories>
|
||
<repository>
|
||
<id>nexus-public</id>
|
||
<name>bsch/nexus public</name>
|
||
<url>http://nexus.yunhaixingtong.com/repository/maven-public/</url>
|
||
<releases><enabled>true</enabled></releases>
|
||
<snapshots><enabled>true</enabled></snapshots>
|
||
</repository>
|
||
</repositories>
|
||
<!--
|
||
ci 构建档案：将构建产物重定向到 IDE（IntelliJ/Eclipse）索引目录之外，
|
||
避免 IDE 后台进程持续锁定 target/maven-status/.../createdFiles.lst 导致
|
||
"Error while storing the mojo status / 拒绝访问"。
|
||
输出目录需从未被 IDE 打开过。常规本地构建无需激活此 profile。
|
||
-->
|
||
<profiles>
|
||
<profile>
|
||
<id>ci</id>
|
||
<build>
|
||
<directory>C:/notice-build/notice</directory>
|
||
</build>
|
||
</profile>
|
||
</profiles>
|
||
|
||
</project>
|