Procházet zdrojové kódy

Changes in configuration

Drowsito před 2 měsíci
rodič
revize
6e3f00a366

+ 3 - 4
pom.xml

@@ -52,10 +52,9 @@
 			<artifactId>spring-boot-starter-actuator</artifactId>
 		</dependency>
 		<dependency>
-	        <groupId>de.codecentric</groupId>
-	        <artifactId>spring-boot-admin-starter-client</artifactId>
-	        <version>3.3.0</version>
-    	</dependency>
+			<groupId>io.micrometer</groupId>
+			<artifactId>micrometer-registry-prometheus</artifactId>
+		</dependency>
 		<dependency>
 			<groupId>org.springframework.boot</groupId>
 			<artifactId>spring-boot-starter-thymeleaf</artifactId>

+ 3 - 16
src/main/java/es/uv/saic/config/SecurityConfig.java

@@ -9,30 +9,24 @@ import org.springframework.beans.factory.annotation.Value;
 import org.springframework.context.annotation.Bean;
 import org.springframework.context.annotation.Configuration;
 import org.springframework.security.authentication.AuthenticationManager;
-import org.springframework.security.authorization.AuthorizationDecision;
-import org.springframework.security.authorization.AuthorizationManager;
 import org.springframework.security.config.annotation.authentication.builders.AuthenticationManagerBuilder;
 import org.springframework.security.config.annotation.method.configuration.EnableMethodSecurity;
 import org.springframework.security.config.annotation.web.builders.HttpSecurity;
 import org.springframework.security.config.annotation.web.configuration.EnableWebSecurity;
-import org.springframework.security.config.http.SessionCreationPolicy;
 import org.springframework.security.core.session.SessionRegistry;
 import org.springframework.security.core.session.SessionRegistryImpl;
 import org.springframework.security.crypto.bcrypt.BCryptPasswordEncoder;
 import org.springframework.security.crypto.password.PasswordEncoder;
 import org.springframework.security.ldap.DefaultSpringSecurityContextSource;
 import org.springframework.security.web.SecurityFilterChain;
-import org.springframework.security.web.access.intercept.RequestAuthorizationContext;
+import org.springframework.security.web.access.expression.WebExpressionAuthorizationManager;
 import org.springframework.security.web.authentication.session.CompositeSessionAuthenticationStrategy;
 import org.springframework.security.web.authentication.session.ConcurrentSessionControlAuthenticationStrategy;
 import org.springframework.security.web.authentication.session.RegisterSessionAuthenticationStrategy;
 import org.springframework.security.web.authentication.session.SessionAuthenticationStrategy;
 import org.springframework.security.web.authentication.session.SessionFixationProtectionStrategy;
 import org.springframework.security.web.session.HttpSessionEventPublisher;
-import org.springframework.security.web.util.matcher.IpAddressMatcher;
-
 import es.uv.saic.service.AuthProvider;
-import jakarta.servlet.http.HttpServletRequest;
 
 
 @Configuration
@@ -52,7 +46,8 @@ public class SecurityConfig {
 	        	.requestMatchers("/", "/css/**", "/js/**", "/img/**", "/logos/*", "/logos/**").permitAll()
 	        	.requestMatchers("/login**").permitAll()
 	        	.requestMatchers("/keepalive").permitAll()
-	        	.requestMatchers("/actuator/**").access(hasIpAddress(this.validIp))
+	        	.requestMatchers("/actuator/**").access(new WebExpressionAuthorizationManager("hasIpAddress('" + this.validIp + "')"))
+				.requestMatchers("/actuator/**").access(new WebExpressionAuthorizationManager("hasIpAddress('127.0.0.1')"))
 	        )
 	        .authorizeHttpRequests((auth)-> auth
 	            //.anyRequest().fullyAuthenticated()
@@ -66,14 +61,6 @@ public class SecurityConfig {
 	
 	    return http.build();
 	}
-	
-	private static AuthorizationManager<RequestAuthorizationContext> hasIpAddress(String ipAddress) {
-        IpAddressMatcher ipAddressMatcher = new IpAddressMatcher(ipAddress);
-        return (authentication, context) -> {
-            HttpServletRequest request = context.getRequest();
-            return new AuthorizationDecision(ipAddressMatcher.matches(request));
-        };
-    }
 	    
     @Bean
     public AuthenticationManager authenticationManager(HttpSecurity http) throws Exception {

+ 1 - 1
src/main/java/es/uv/saic/feign/CoreClient.java

@@ -26,7 +26,7 @@ import es.uv.saic.dto.ProcesDTO;
 import es.uv.saic.dto.TascaDTO;
 import es.uv.saic.dto.TascaInformeTransferDTO;
 
-@FeignClient(name = "core-service")
+@FeignClient(name = "saic-core-service")
 public interface CoreClient {
     //IndicadorController.java
     @GetMapping("/getFromTitulacio/{idTitulacio}/{curs}")

+ 0 - 3
src/main/java/es/uv/saic/web/DownloadController.java

@@ -79,9 +79,6 @@ public class DownloadController {
 	@Value("${saic.data.templates.logoPath}")
 	private String logoPath;
 
-	@Value("${saic.url.core.domain}")
-	private String uri;
-
 	@Autowired
 	private CoreClient core;
 

+ 1 - 16
src/main/resources/application-local.properties

@@ -1,13 +1,5 @@
-server.port = 0
-spring.application.name = docs-service
-eureka.client.service-url.defaultZone=http://127.0.0.1:8761/eureka
-eureka.instance.prefer-ip-address=false
-eureka.instance.status-page-url-path=/
-
 # Urls
-saic.url.core.domain = http://core-service
-saic.url.data.domain = http://data-service
-saic.url.docs.domain = http://docs-service
+saic.url.domain = http://127.0.0.1
 saic.url.public = ${saic.url.docs.domain}/public
 
 # JPA Debug
@@ -44,11 +36,4 @@ logging.file.name=/home/dagarcos/DATA_SYNC/UV_APPS/SAIC/DATA/saic-data/logsd/sai
 # Scheduler
 saic.scheduler.expired.enabled=false
 
-# Actuator
-spring.boot.admin.client.url=http://127.0.0.1:9090
-spring.boot.admin.client.username=admin
-spring.boot.admin.client.password=kkdvk
-management.endpoints.web.exposure.include=*
-management.endpoint.health.show-details=always
-saic.actuator.validIp=127.0.0.1
 

+ 14 - 17
src/main/resources/application.properties

@@ -1,3 +1,14 @@
+spring.application.name = saic-docs-service
+
+#EUREKA
+eureka.client.service-url.defaultZone=http://127.0.0.1:8761/eureka
+eureka.instance.prefer-ip-address=false
+eureka.instance.status-page-url-path=/
+
+# Actuator
+management.endpoints.web.exposure.include=*
+management.endpoint.health.show-details=always
+saic.actuator.validIp=147.156.0.0/16
 
 # Activate spring profiles
 spring.profiles.active=@activatedProperties@
@@ -40,7 +51,7 @@ spring.mail.properties.mail.smtp.auth = false
 spring.mail.properties.mail.smtp.starttls.enable = false
 
 # Server
-server.port=8080
+server.port=0
 server.forward-headers-strategy=native
 server.tomcat.remoteip.remote-ip-header=X-Forwarded-For
 server.tomcat.remoteip.protocol-header=X-Forwarded-Proto
@@ -48,20 +59,6 @@ server.tomcat.remoteip.port-header=X-Forwarded-Port
 server.tomcat.use-relative-redirects=true
 server.tomcat.remoteip.internal-proxies=.*
 
-# UQ server connection parameters
-saic.uqserver.host = uqserver.uv.es
-saic.uqserver.dbname.grau = MDB_grau
-saic.uqserver.dbname.master = MDB_master
-saic.uqserver.dbname.doct = MDB_doctorado
-saic.uqserver.dbname.prof = MDB_evalProf
-saic.uqserver.user = graucer
-saic.uqserver.passwd = C3team4mdb
-
-saic.uqserver2.host = dbmaster.uv.es
-saic.uqserver2.dbname.master = MDB_master
-saic.uqserver2.dbname.prof = MDB_evalProf
-saic.uqserver2.dbname.otros = MDB_otros
-saic.uqserver2.dbname.doct = MDB_doctorado
-saic.uqserver2.user = saic
-saic.uqserver2.passwd = S41cdb01.
+# Nombre de la cookie de sesion
+server.servlet.session.cookie.name=SAICSESSIONID