1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

23

24

25

26

27

28

29

30

31

32

33

34

35

36

37

38

39

40

41

42

43

44

45

46

47

48

49

50

51

52

53

54

55

spring:

  aop: #aop代理

    proxyTargetClass: true

  application:

    name: api-gateway-server

server:

  port: 8080

  tomcat:

    uri-encoding: UTF-8

#服務註冊

eureka:

  client:

    serviceUrl:

      defaultZone: http://127.0.0.1:8761/eureka/

#  server:

#    enable-self-preservation: false  #關閉eureka自我保護,生產環境不建議關閉自我保護

#認證中心index頁面地址,如果直接登入認證中心則會跳轉到該地址

uaa.server.index-path: /uaa/index

#認證中心跳轉路徑字首

uaa.server.service.path: /uaa/**

#不走認證的url集合

http.authorize.matchers: /**/css/**,/**/styles/**,/**/js/**,/**/plugin/**,/**/plugins/**,/**/template/**,/**/img/**,/**/fonts/**,/**/cvr100u/**,/css/**,/js/**,/plugin/**,/template/**,/img/**,/fonts/**,/cvr100u/**

#閘道器資訊

zuul:

  routes:

    uaa-server:

      sensitiveHeaders: "*"  #敏感headers也支援全域性設定(必須這樣設定)

      path: ${uaa.server.service.path}

      stripPrefix: false

  add-proxy-headers: true  #X-Forwarder-Host請求頭預設新增到轉發請求中

#安全認證資訊

security:

  basic:

    enabled: false

  oauth2:

    sso:

      loginPath: /login

    client:

      accessTokenUri: http://127.0.0.1:7769/uaa/oauth/token

      userAuthorizationUri: /uaa/oauth/authorize

      clientId: acme

      clientSecret: acmesecret

    resource:

      jwt:

        keyValue: |

          -----BEGIN PUBLIC KEY-----

          MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnGp/Q5lh0P8nPL21oMMrt2RrkT9AW5jgYwLfSUnJVc9G6uR3cXRRDCjHqWU5WYwivcF180A6CWp/ireQFFBNowgc5XaA0kPpzEtgsA5YsNX7iSnUibB004iBTfU9hZ2Rbsc8cWqynT0RyN4TP1RYVSeVKvMQk4GT1r7JCEC+TNu1ELmbNwMQyzKjsfBXyIOCFU/E94ktvsTZUHF4Oq44DBylCDsS1k7/sfZC2G5EU7Oz0mhG8+Uz6MSEQHtoIi6mc8u64Rwi3Z3tscuWG2ShtsUFuNSAFNkY7LkLn+/hxLCu2bNISMaESa8dG22CIMuIeRLVcAmEWEWH5EEforTg+QIDAQAB

          -----END PUBLIC KEY-----

      id: openid

      serviceId: ${PREFIX:}resource

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

23

24

25

26

27

28

29

30

31

32

33

34

35

36

37

38

39

40

41

42

43

44

45

46

47

48

49

50

51

52

53

54

55

56

57

58

59

60

61

62

63

64

65

66

67

68

69

70

spring:

  application:

    name: uaa-server

  #資料庫連線資訊

  datasource:

    url: jdbc:mysql://localhost:3306/uaa?characterEncoding=UTF-8

    username: root

    password: root

    driver-class-name: com.mysql.jdbc.Driver

    max-idle: 5

    max-wait: 10000

    min-idle: 2

    initial-size: 3

    validation-query: SELECT 1

    time-between-eviction-runs-millis: 18800

    jdbc-interceptors: ConnectionState;SlowQueryReport(threshold=50)

  jpa:

    database: MYSQL

    show-sql: true

  #使用redis儲存session,redis服務地址

  redis:

    host: 127.0.0.1

    port: 6379

#不快取thymeleaf模板，開發環境下配置該屬性，生產環境下請勿配置

thymeleaf:

    cache: false

    cache-period: 0

template:

    cache: false

server:

  port: 7769

  context-path: /uaa   #認證服務上下文地址(必須配置)

  use-forward-headers: false

  tomcat:

    uri-encoding: UTF-8

#服務註冊

eureka:

  instance:

    preferIpAddress: true

  client:

    serviceUrl:

      defaultZone: http://127.0.0.1:8761/eureka/

security:

  basic:

    enabled: false

  user:

    password: password

  ignored: /css/**,/js/**,/favicon.ico,/webjars/**

  sessions: NEVER #永遠不自己建立session

#jwt資訊(自定義的屬性,AuthorizationServerConfigurer配置類中用到)

jwt:

  access:

    token:

      converter:

        resource:

          location: classpath:keystore.jks

          password: foobar

          key-pair-alias: test

#自定義的屬性,WebSecurityConfigurer配置類中用到

http:

  authorize:

    #不走認證的url集合

    matchers: /**/css/**,/**/js/**,/**/plugin/**,/**/template/**,/**/img/**,/**/fonts/**,/**/cvr100u/**,/css/**,/js/**,/plugin/**,/template/**,/img/**,/fonts/**,/cvr100u/**

  login:

    path: /login