解决Nacos漏洞

xieb

2023-05-16 d2937a0cfb82dd8b37ed9cb239973c1af30b6c1e

解决Nacos漏洞

 skjcmanager/skjcmanager-common/src/main/java/cn/gistack/common/constant/LauncherConstant.java

@@ -40,13 +40,17 @@
    /**
     * nacos dev 地址
     */
    String NACOS_DEV_ADDR = "172.16.13.129:8848";
    String NACOS_DEV_ADDR = "127.0.0.1:8848";

    /**
     * nacos prod 地址
     */
    String NACOS_PROD_ADDR = "127.0.0.1:8888";

    String NACOS_USERNAME = "nacos";

    String NACOS_PASSWORD = "1qaz!QAZ";

    /**
     * nacos test 地址
     */

 skjcmanager/skjcmanager-common/src/main/java/cn/gistack/common/launch/LauncherServiceImpl.java

@@ -38,6 +38,8 @@
        // 通用注册
        PropsUtil.setProperty(props, "spring.cloud.nacos.discovery.server-addr", LauncherConstant.nacosAddr(profile));
        PropsUtil.setProperty(props, "spring.cloud.nacos.config.server-addr", LauncherConstant.nacosAddr(profile));
        PropsUtil.setProperty(props, "spring.cloud.nacos.username", LauncherConstant.NACOS_USERNAME);
        PropsUtil.setProperty(props, "spring.cloud.nacos.password", LauncherConstant.NACOS_PASSWORD);

        //自定义注册
//        PropsUtil.setProperty(props, "spring.cloud.nacos.config.namespace", "guoshilong");

 skjcmanager/skjcmanager-gateway/src/main/java/cn/gistack/gateway/dynamic/DynamicRouteServiceListener.java

@@ -70,6 +70,8 @@
            Properties properties = new Properties();
            properties.setProperty(PropertyKeyConst.SERVER_ADDR, nacosDiscoveryProperties.getServerAddr());
            properties.setProperty(PropertyKeyConst.NAMESPACE, nacosDiscoveryProperties.getNamespace());
            properties.setProperty(PropertyKeyConst.USERNAME, nacosDiscoveryProperties.getUsername());
            properties.setProperty(PropertyKeyConst.PASSWORD, nacosDiscoveryProperties.getPassword());
            ConfigService configService = NacosFactory.createConfigService(properties);
            configService.addListener(dataId, group, new Listener() {
                @Override

 skjcmanager/skjcmanager-gateway/src/main/resources/bootstrap.yml

@@ -3,6 +3,9 @@

spring:
  cloud:
    nacos:
      username: nacos
      password: 1qaz!QAZ
    gateway:
      discovery:
        locator: