关闭Druid 监控台，关闭 Swagger / BootstrapUI

fs-admin/src/main/java/com/fs/core/config/SecurityConfig.java

@@ -98,6 +98,9 @@ public class SecurityConfig extends WebSecurityConfigurerAdapter
                 .authorizeRequests()
                 // 对于登录login 验证码captchaImage 允许匿名访问
                 .antMatchers("/login", "/captchaImage").anonymous()
+                // 关闭 Druid 监控与 Swagger/BootstrapUI 文档对外访问
+                .antMatchers("/druid/**", "/swagger-ui.html", "/swagger-resources/**", "/webjars/**",
+                        "/*/api-docs", "/v2/api-docs", "/doc.html", "/doc.html/**").denyAll()
                 .antMatchers(
                         HttpMethod.GET,
                         "/*.html",
@@ -116,11 +119,6 @@ public class SecurityConfig extends WebSecurityConfigurerAdapter
                 .antMatchers("/profile/**").anonymous()
                 .antMatchers("/common/download**").anonymous()
                 .antMatchers("/common/download/resource**").anonymous()
-                .antMatchers("/swagger-ui.html").anonymous()
-                .antMatchers("/swagger-resources/**").anonymous()
-                .antMatchers("/webjars/**").anonymous()
-                .antMatchers("/*/api-docs").anonymous()
-                .antMatchers("/druid/**").anonymous()
                 .antMatchers("/expense/**").anonymous()
                 // 除上面外的所有请求全部需要鉴权认证
                 .anyRequest().authenticated()

fs-admin/src/main/resources/application-dev.yml

@@ -65,7 +65,7 @@ spring:
             webStatFilter:
                 enabled: true
             statViewServlet:
-                enabled: true
+                enabled: false
                 # 设置白名单，不填则允许所有访问
                 allow:
                 url-pattern: /druid/*

fs-admin/src/main/resources/application-druid-test.yml

@@ -63,7 +63,7 @@ spring:
             webStatFilter:
                 enabled: true
             statViewServlet:
-                enabled: true
+                enabled: false
                 # 设置白名单，不填则允许所有访问
                 allow:
                 url-pattern: /druid/*

fs-admin/src/main/resources/application-druid.yml

@@ -65,7 +65,7 @@ spring:
             webStatFilter:
                 enabled: true
             statViewServlet:
-                enabled: true
+                enabled: false
                 # 设置白名单，不填则允许所有访问
                 allow:
                 url-pattern: /druid/*

fs-admin/src/main/resources/application.yml

@@ -106,7 +106,7 @@ pagehelper:
 # Swagger配置
 swagger:
   # 是否开启swagger
-  enabled: true
+  enabled: false
   # 请求前缀
   pathMapping: /dev-api
 

fs-api/src/main/java/com/fs/core/config/SecurityConfig.java

@@ -32,6 +32,9 @@ public class SecurityConfig extends WebSecurityConfigurerAdapter
     @Override
     protected void configure(HttpSecurity http) throws Exception {
         http.authorizeRequests()
+                // 关闭 Druid 监控与 Swagger/BootstrapUI 文档对外访问
+                .antMatchers("/druid/**", "/swagger-ui.html", "/swagger-resources/**", "/webjars/**",
+                        "/*/api-docs", "/v2/api-docs", "/doc.html", "/doc.html/**").denyAll()
                 .antMatchers("/**").permitAll()
                 .anyRequest().authenticated()
                 .and().csrf().disable();

fs-api/src/main/resources/application-dev.yml

@@ -60,7 +60,7 @@ spring:
             webStatFilter:
                 enabled: true
             statViewServlet:
-                enabled: true
+                enabled: false
                 # 设置白名单，不填则允许所有访问
                 allow:
                 url-pattern: /druid/*

fs-api/src/main/resources/application-druid-test.yml

@@ -59,7 +59,7 @@ spring:
             webStatFilter:
                 enabled: true
             statViewServlet:
-                enabled: true
+                enabled: false
                 # 设置白名单，不填则允许所有访问
                 allow:
                 url-pattern: /druid/*

fs-api/src/main/resources/application-druid.yml

@@ -59,7 +59,7 @@ spring:
             webStatFilter:
                 enabled: true
             statViewServlet:
-                enabled: true
+                enabled: false
                 # 设置白名单，不填则允许所有访问
                 allow:
                 url-pattern: /druid/*

fs-company-app/src/main/java/com/fs/core/config/SecurityConfig.java

@@ -33,6 +33,9 @@ public class SecurityConfig extends WebSecurityConfigurerAdapter
     @Override
     protected void configure(HttpSecurity http) throws Exception {
         http.authorizeRequests()
+                // 关闭 Druid 监控与 Swagger/BootstrapUI 文档对外访问
+                .antMatchers("/druid/**", "/swagger-ui.html", "/swagger-resources/**", "/webjars/**",
+                        "/*/api-docs", "/v2/api-docs", "/doc.html", "/doc.html/**").denyAll()
                 .antMatchers("/**").permitAll()
                 .anyRequest().authenticated()
                 .and().csrf().disable();

fs-company/src/main/java/com/fs/core/config/SecurityConfig.java

@@ -99,6 +99,9 @@ public class SecurityConfig extends WebSecurityConfigurerAdapter
                 .authorizeRequests()
                 // 对于登录login 验证码captchaImage 允许匿名访问
                 .antMatchers("/login", "/captchaImage").anonymous()
+                // 关闭 Druid 监控与 Swagger/BootstrapUI 文档对外访问
+                .antMatchers("/druid/**", "/swagger-ui.html", "/swagger-resources/**", "/webjars/**",
+                        "/*/api-docs", "/v2/api-docs", "/doc.html", "/doc.html/**").denyAll()
                 .antMatchers(
                         HttpMethod.GET,
                         "/*.html",
@@ -114,11 +117,6 @@ public class SecurityConfig extends WebSecurityConfigurerAdapter
                 .antMatchers("/profile/**").anonymous()
                 .antMatchers("/common/download**").anonymous()
                 .antMatchers("/common/download/resource**").anonymous()
-                .antMatchers("/swagger-ui.html").anonymous()
-                .antMatchers("/swagger-resources/**").anonymous()
-                .antMatchers("/webjars/**").anonymous()
-                .antMatchers("/*/api-docs").anonymous()
-                .antMatchers("/druid/**").anonymous()
                 .antMatchers("/expense/**").anonymous()
                 .antMatchers("/qwEvent/**").anonymous()
                 .antMatchers("/qwChat/**").anonymous()

fs-company/src/main/resources/application-dev.yml

@@ -64,7 +64,7 @@ spring:
             webStatFilter:
                 enabled: true
             statViewServlet:
-                enabled: true
+                enabled: false
                 # 设置白名单，不填则允许所有访问
                 allow:
                 url-pattern: /druid/*

fs-company/src/main/resources/application-druid-test.yml

@@ -59,7 +59,7 @@ spring:
             webStatFilter:
                 enabled: true
             statViewServlet:
-                enabled: true
+                enabled: false
                 # 设置白名单，不填则允许所有访问
                 allow:
                 url-pattern: /druid/*

fs-company/src/main/resources/application-druid.yml

@@ -65,7 +65,7 @@ spring:
             webStatFilter:
                 enabled: true
             statViewServlet:
-                enabled: true
+                enabled: false
                 # 设置白名单，不填则允许所有访问
                 allow:
                 url-pattern: /druid/*

fs-company/src/main/resources/application.yml

@@ -85,7 +85,7 @@ pagehelper:
 # Swagger配置
 swagger:
   # 是否开启swagger
-  enabled: true
+  enabled: false
   # 请求前缀
   pathMapping: /dev-api
 

fs-live-mq/src/main/java/com/fs/core/config/SecurityConfig.java

@@ -33,6 +33,9 @@ public class SecurityConfig extends WebSecurityConfigurerAdapter
     @Override
     protected void configure(HttpSecurity http) throws Exception {
         http.authorizeRequests()
+                // 关闭 Druid 监控与 Swagger/BootstrapUI 文档对外访问
+                .antMatchers("/druid/**", "/swagger-ui.html", "/swagger-resources/**", "/webjars/**",
+                        "/*/api-docs", "/v2/api-docs", "/doc.html", "/doc.html/**").denyAll()
                 .antMatchers("/**").permitAll()
                 .anyRequest().authenticated()
                 .and().csrf().disable();

fs-live-mq/src/main/resources/application-dev.yml

@@ -60,7 +60,7 @@ spring:
             webStatFilter:
                 enabled: true
             statViewServlet:
-                enabled: true
+                enabled: false
                 # 设置白名单，不填则允许所有访问
                 allow:
                 url-pattern: /druid/*

fs-live-mq/src/main/resources/application-druid-test.yml

@@ -59,7 +59,7 @@ spring:
             webStatFilter:
                 enabled: true
             statViewServlet:
-                enabled: true
+                enabled: false
                 # 设置白名单，不填则允许所有访问
                 allow:
                 url-pattern: /druid/*

fs-live-mq/src/main/resources/application-druid.yml

@@ -59,7 +59,7 @@ spring:
             webStatFilter:
                 enabled: true
             statViewServlet:
-                enabled: true
+                enabled: false
                 # 设置白名单，不填则允许所有访问
                 allow:
                 url-pattern: /druid/*

fs-live-socket/src/main/java/com/fs/core/config/SecurityConfig.java

@@ -33,6 +33,9 @@ public class SecurityConfig extends WebSecurityConfigurerAdapter
     @Override
     protected void configure(HttpSecurity http) throws Exception {
         http.authorizeRequests()
+                // 关闭 Druid 监控与 Swagger/BootstrapUI 文档对外访问
+                .antMatchers("/druid/**", "/swagger-ui.html", "/swagger-resources/**", "/webjars/**",
+                        "/*/api-docs", "/v2/api-docs", "/doc.html", "/doc.html/**").denyAll()
                 .antMatchers("/**").permitAll()
                 .anyRequest().authenticated()
                 .and().csrf().disable();

fs-live-socket/src/main/resources/application-dev.yml

@@ -61,7 +61,7 @@ spring:
             webStatFilter:
                 enabled: true
             statViewServlet:
-                enabled: true
+                enabled: false
                 # 设置白名单，不填则允许所有访问
                 allow:
                 url-pattern: /druid/*

fs-live-socket/src/main/resources/application-druid-test.yml

@@ -59,7 +59,7 @@ spring:
             webStatFilter:
                 enabled: true
             statViewServlet:
-                enabled: true
+                enabled: false
                 # 设置白名单，不填则允许所有访问
                 allow:
                 url-pattern: /druid/*

fs-live-socket/src/main/resources/application-druid.yml

@@ -59,7 +59,7 @@ spring:
             webStatFilter:
                 enabled: true
             statViewServlet:
-                enabled: true
+                enabled: false
                 # 设置白名单，不填则允许所有访问
                 allow:
                 url-pattern: /druid/*

fs-live-streamer/src/main/java/com/fs/framework/config/SecurityConfig.java

@@ -35,6 +35,9 @@ public class SecurityConfig extends WebSecurityConfigurerAdapter
     protected void configure(HttpSecurity http) throws Exception
     {
         http.authorizeRequests()
+                // 关闭 Druid 监控与 Swagger/BootstrapUI 文档对外访问
+                .antMatchers("/druid/**", "/swagger-ui.html", "/swagger-resources/**", "/webjars/**",
+                        "/*/api-docs", "/v2/api-docs", "/doc.html", "/doc.html/**").denyAll()
                 .antMatchers("/**").permitAll()
                 .anyRequest().authenticated()
                 .and().csrf().disable();

fs-live-streamer/src/main/resources/application.yml

@@ -96,7 +96,7 @@ pagehelper:
 # Swagger配置
 swagger:
   # 是否开启swagger
-  enabled: true
+  enabled: false
   # 请求前缀
   pathMapping: /
 

fs-socket/src/main/java/com/fs/core/config/SecurityConfig.java

@@ -99,6 +99,9 @@ public class SecurityConfig extends WebSecurityConfigurerAdapter
                 .authorizeRequests()
                 // 对于登录login 验证码captchaImage 允许匿名访问
                 .antMatchers("/login", "/captchaImage").anonymous()
+                // 关闭 Druid 监控与 Swagger/BootstrapUI 文档对外访问
+                .antMatchers("/druid/**", "/swagger-ui.html", "/swagger-resources/**", "/webjars/**",
+                        "/*/api-docs", "/v2/api-docs", "/doc.html", "/doc.html/**").denyAll()
                 .antMatchers(
                         HttpMethod.GET,
                         "/*.html",
@@ -114,11 +117,6 @@ public class SecurityConfig extends WebSecurityConfigurerAdapter
                 .antMatchers("/profile/**").anonymous()
                 .antMatchers("/common/download**").anonymous()
                 .antMatchers("/common/download/resource**").anonymous()
-                .antMatchers("/swagger-ui.html").anonymous()
-                .antMatchers("/swagger-resources/**").anonymous()
-                .antMatchers("/webjars/**").anonymous()
-                .antMatchers("/*/api-docs").anonymous()
-                .antMatchers("/druid/**").anonymous()
                 .antMatchers("/expense/**").anonymous()
                 .antMatchers("/qwEvent/**").anonymous()
                 .antMatchers("/imserver/**").anonymous()

fs-socket/src/main/resources/application-druid-test.yml

@@ -59,7 +59,7 @@ spring:
             webStatFilter:
                 enabled: true
             statViewServlet:
-                enabled: true
+                enabled: false
                 # 设置白名单，不填则允许所有访问
                 allow:
                 url-pattern: /druid/*

fs-socket/src/main/resources/application.yml

@@ -85,7 +85,7 @@ pagehelper:
 # Swagger配置
 swagger:
   # 是否开启swagger
-  enabled: true
+  enabled: false
   # 请求前缀
   pathMapping: /dev-api
 

fs-user-app/src/main/java/com/fs/core/config/SecurityConfig.java

@@ -33,6 +33,9 @@ public class SecurityConfig extends WebSecurityConfigurerAdapter
     @Override
     protected void configure(HttpSecurity http) throws Exception {
         http.authorizeRequests()
+                // 关闭 Druid 监控与 Swagger/BootstrapUI 文档对外访问
+                .antMatchers("/druid/**", "/swagger-ui.html", "/swagger-resources/**", "/webjars/**",
+                        "/*/api-docs", "/v2/api-docs", "/doc.html", "/doc.html/**").denyAll()
                 .antMatchers("/**").permitAll()
                 .anyRequest().authenticated()
                 .and().csrf().disable();

fs-user-app/src/main/resources/application-dev.yml

@@ -90,7 +90,7 @@ spring:
             webStatFilter:
                 enabled: true
             statViewServlet:
-                enabled: true
+                enabled: false
                 # 设置白名单，不填则允许所有访问
                 allow:
                 url-pattern: /druid/*

fs-user-app/src/main/resources/application-druid-test.yml

@@ -59,7 +59,7 @@ spring:
             webStatFilter:
                 enabled: true
             statViewServlet:
-                enabled: true
+                enabled: false
                 # 设置白名单，不填则允许所有访问
                 allow:
                 url-pattern: /druid/*

fs-user-app/src/main/resources/application-druid.yml

@@ -59,7 +59,7 @@ spring:
             webStatFilter:
                 enabled: true
             statViewServlet:
-                enabled: true
+                enabled: false
                 # 设置白名单，不填则允许所有访问
                 allow:
                 url-pattern: /druid/*