Drowsito пре 2 месеци
родитељ
комит
042cc8d6bc

+ 3 - 4
pom.xml

@@ -52,10 +52,9 @@
 			<artifactId>spring-boot-starter-actuator</artifactId>
 		</dependency>
 		<dependency>
-	        <groupId>de.codecentric</groupId>
-	        <artifactId>spring-boot-admin-starter-client</artifactId>
-	        <version>3.3.0</version>
-    	</dependency>
+			<groupId>io.micrometer</groupId>
+			<artifactId>micrometer-registry-prometheus</artifactId>
+		</dependency>
 		<!--<dependency>
 			<groupId>org.springframework.boot</groupId>
 			<artifactId>spring-boot-starter-thymeleaf</artifactId>

+ 3 - 16
src/main/java/es/uv/saic/config/SecurityConfig.java

@@ -9,30 +9,24 @@ import org.springframework.beans.factory.annotation.Value;
 import org.springframework.context.annotation.Bean;
 import org.springframework.context.annotation.Configuration;
 import org.springframework.security.authentication.AuthenticationManager;
-import org.springframework.security.authorization.AuthorizationDecision;
-import org.springframework.security.authorization.AuthorizationManager;
 import org.springframework.security.config.annotation.authentication.builders.AuthenticationManagerBuilder;
 import org.springframework.security.config.annotation.method.configuration.EnableMethodSecurity;
 import org.springframework.security.config.annotation.web.builders.HttpSecurity;
 import org.springframework.security.config.annotation.web.configuration.EnableWebSecurity;
-import org.springframework.security.config.http.SessionCreationPolicy;
 import org.springframework.security.core.session.SessionRegistry;
 import org.springframework.security.core.session.SessionRegistryImpl;
 import org.springframework.security.crypto.bcrypt.BCryptPasswordEncoder;
 import org.springframework.security.crypto.password.PasswordEncoder;
 import org.springframework.security.ldap.DefaultSpringSecurityContextSource;
 import org.springframework.security.web.SecurityFilterChain;
-import org.springframework.security.web.access.intercept.RequestAuthorizationContext;
+import org.springframework.security.web.access.expression.WebExpressionAuthorizationManager;
 import org.springframework.security.web.authentication.session.CompositeSessionAuthenticationStrategy;
 import org.springframework.security.web.authentication.session.ConcurrentSessionControlAuthenticationStrategy;
 import org.springframework.security.web.authentication.session.RegisterSessionAuthenticationStrategy;
 import org.springframework.security.web.authentication.session.SessionAuthenticationStrategy;
 import org.springframework.security.web.authentication.session.SessionFixationProtectionStrategy;
 import org.springframework.security.web.session.HttpSessionEventPublisher;
-import org.springframework.security.web.util.matcher.IpAddressMatcher;
-
 import es.uv.saic.service.AuthProvider;
-import jakarta.servlet.http.HttpServletRequest;
 
 
 @Configuration
@@ -52,7 +46,8 @@ public class SecurityConfig {
 	        	.requestMatchers("/", "/css/**", "/js/**", "/img/**", "/logos/*", "/logos/**").permitAll()
 	        	.requestMatchers("/login**").permitAll()
 	        	.requestMatchers("/keepalive").permitAll()
-	        	.requestMatchers("/actuator/**").access(hasIpAddress(this.validIp))
+	        	.requestMatchers("/actuator/**").access(new WebExpressionAuthorizationManager("hasIpAddress('" + this.validIp + "')"))
+				.requestMatchers("/actuator/**").access(new WebExpressionAuthorizationManager("hasIpAddress('127.0.0.1')")) 
 	        )
 	        .authorizeHttpRequests((auth)-> auth
 	            //.anyRequest().fullyAuthenticated()
@@ -66,14 +61,6 @@ public class SecurityConfig {
 	
 	    return http.build();
 	}
-	
-	private static AuthorizationManager<RequestAuthorizationContext> hasIpAddress(String ipAddress) {
-        IpAddressMatcher ipAddressMatcher = new IpAddressMatcher(ipAddress);
-        return (authentication, context) -> {
-            HttpServletRequest request = context.getRequest();
-            return new AuthorizationDecision(ipAddressMatcher.matches(request));
-        };
-    }
 	    
     @Bean
     public AuthenticationManager authenticationManager(HttpSecurity http) throws Exception {

+ 1 - 1
src/main/java/es/uv/saic/feign/DataClient.java

@@ -14,7 +14,7 @@ import es.uv.saic.dto.ImportDTO;
 import es.uv.saic.dto.IndicadorEnquestaTmpDup;
 import es.uv.saic.dto.TablaDTO;
 
-@FeignClient(name = "data-service")
+@FeignClient(name = "saic-data-service")
 public interface DataClient {
 
     @GetMapping("/data/import")

+ 1 - 1
src/main/java/es/uv/saic/feign/DocumentClient.java

@@ -20,7 +20,7 @@ import es.uv.saic.dto.DocumentTmpDTO;
 import es.uv.saic.dto.PdfDTO;
 import fr.opensagres.xdocreport.core.XDocReportException;
 
-@FeignClient(name = "docs-service", contextId = "docs-service")
+@FeignClient(name = "saic-docs-service", contextId = "docs-service")
 public interface DocumentClient {
 
     @PostMapping("/document/save")

+ 1 - 1
src/main/java/es/uv/saic/feign/PlantillaClient.java

@@ -14,7 +14,7 @@ import es.uv.saic.domain.Plantilla;
 import es.uv.saic.dto.PdfDTO;
 import es.uv.saic.dto.TemplateDataDTO;
 
-@FeignClient(name = "docs-service", contextId = "plantilla-controller")
+@FeignClient(name = "saic-docs-service", contextId = "plantilla-controller")
 public interface PlantillaClient {
 
     @GetMapping("/plantilla")

+ 1 - 16
src/main/resources/application-local.properties

@@ -1,13 +1,5 @@
-server.port = 0
-spring.application.name = core-service
-eureka.client.service-url.defaultZone=http://127.0.0.1:8761/eureka
-eureka.instance.prefer-ip-address=false
-eureka.instance.status-page-url-path=/
-
 # Urls
-saic.url.domain = http://core-service
-saic.url.data.domain = http://data-service
-saic.url.docs.domain = http://docs-service
+saic.url.domain = http://127.0.0.1
 saic.url.public = ${saic.url.domain}/public
 
 # JPA Debug
@@ -44,11 +36,4 @@ logging.file.name=/home/dagarcos/DATA_SYNC/UV_APPS/SAIC/DATA/saic-data/logsd/sai
 # Scheduler
 saic.scheduler.expired.enabled=false
 
-# Actuator
-spring.boot.admin.client.url=http://127.0.0.1:9090
-spring.boot.admin.client.username=admin
-spring.boot.admin.client.password=kkdvk
-management.endpoints.web.exposure.include=*
-management.endpoint.health.show-details=always
-saic.actuator.validIp=127.0.0.1
 

+ 15 - 1
src/main/resources/application.properties

@@ -1,3 +1,14 @@
+spring.application.name = saic-core-service
+
+# EUREKA
+eureka.client.service-url.defaultZone=http://127.0.0.1:8761/eureka
+eureka.instance.prefer-ip-address=false
+eureka.instance.status-page-url-path=/
+
+# Actuator
+management.endpoints.web.exposure.include=*
+management.endpoint.health.show-details=always
+saic.actuator.validIp=147.156.0.0/16
 
 # Activate spring profiles
 spring.profiles.active=@activatedProperties@
@@ -40,7 +51,7 @@ spring.mail.properties.mail.smtp.auth = false
 spring.mail.properties.mail.smtp.starttls.enable = false
 
 # Server
-server.port=8080
+server.port=0
 server.forward-headers-strategy=native
 server.tomcat.remoteip.remote-ip-header=X-Forwarded-For
 server.tomcat.remoteip.protocol-header=X-Forwarded-Proto
@@ -65,3 +76,6 @@ saic.uqserver2.dbname.doct = MDB_doctorado
 saic.uqserver2.user = saic
 saic.uqserver2.passwd = S41cdb01.
 
+# Nombre de la cookie de sesion
+server.servlet.session.cookie.name=SAICSESSIONID
+