Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

apollo自带的eureka登录时需要增加账户和密码验证 #5308

Closed
shaojin6 opened this issue Jan 7, 2025 · 2 comments
Closed

apollo自带的eureka登录时需要增加账户和密码验证 #5308

shaojin6 opened this issue Jan 7, 2025 · 2 comments

Comments

@shaojin6
Copy link

shaojin6 commented Jan 7, 2025

最近公安部要求我部apollo自带的eureka登录时需要增加账户和密码验证,像这样:
image
,我通过对apollo的源码分析,发现是只做了更精确的匹配,实际使用时通过指定路径窗口登录又不能到eureka注册界面的。比如到如下界面:
image

源码为如下:
image
其中的.antMatchers("/**").permitAll();非常不安全。
代码修改改为如下初步是可以解决问题的:
image

@nobodyiam
Copy link
Member

eureka开启访问控制是为了让只有受控的apollo-configservice和apollo-adminservice可以注册到eureka。

@shaojin6 shaojin6 closed this as completed Jan 8, 2025
@shaojin6
Copy link
Author

shaojin6 commented Jan 8, 2025

eureka开启访问控制是为了让只有受控的apollo-configservice和apollo-adminservice可以注册到eureka。

公安部要求eureka dashboard需要增加账户才能访问。不得已。重新打的包,制作的镜像,满足了安全需求。

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants