B8-zKG|@chXhDDmTDGUctP;oYwC7(i_7~Z1z*O?yb>+@>`Qx&8*{u6vz(2sMYdFlX)4xrH4eHa{0}NyfJoyoJjXdNBD#MT^Zj~@O}J%RlYEt+}9`3DtZ!XB-o?!dTADAXi?39opv0G
zT>W%^qu$MSaC#t?)b7qCx-=ssYK2uUBWk=;HDcn~c{#=GiBZSWzztfD2HFwTk{bIK
z&0+R(=ajB)DxXvimB{9Z(|k?0otu*;tCMk=GRu?W9QY3&C%$LX^cFW^5BF{Ul3e{}r35N?S+?nfm
z#O)-jR)~(Zkn2w2W8>h!iZbE?o>23O0O!0vgZtZAcwBocSh-@|dBPU0b@wrIw@2d6
zcb6}yXN-u}91{ssG2VBt6K=s$mUs`pf^6wA%aG>nE44C4b5%Pt5c6tAKJ@SDwx`B=z*Rak_T
z{2;5x5`HICp@AP|cksP1tlCzNcky#RdHMbD3;dGCE+opYIP>7wd~ch-gHpfY({K6n
z;CIx*+mEt5hV(S1@E!0{7LBxQ7a|jO$gE1UD%8Swy@LOiify*g3dpQ?R491miuofYBj_3d;Ecp+-A-G$XUpm{fV=r
zHTyGXC#~6EIHQ~KSNx6R-}#%1(y)v$d-gv5j`DY$zX68lANVJw1azGu
zpuY0+!+6Gn3;0qNFJ^ICaK|RC=p}%==%ihifphI`j=EC*H^aO57eUMLZ~VsrZ=sCX
zHPZqA>Nt2I>^+2Scfrog!74e}E7yg6?Ru~W2z&nxU`H_OSo;LSDy*fk#hAKp${CA^
zf>kzmO3rYn$fx-^N-Sfh00$YoC@IlHO2jY^y_7h_8WBeggD$d5cy9q_FuZoy>Re%C
zd9cFd#Z}_iVY
+
+
+ tacit-parent
+ com.tacit
+ 1.0.0-SNAPSHOT
+
+ 4.0.0
+
+ tacit-gateway
+ Tacit Gateway
+ Gateway Service for Tacit Microservices
+
+
+
+
+ org.springframework.cloud
+ spring-cloud-starter-gateway
+
+
+
+
+ com.alibaba.cloud
+ spring-cloud-starter-alibaba-nacos-discovery
+
+
+ com.alibaba.cloud
+ spring-cloud-starter-alibaba-nacos-config
+
+
+
+
+ org.springframework.boot
+ spring-boot-starter-security
+
+
+
+
+ com.tacit
+ tacit-common
+ ${project.parent.version}
+
+
+
+
+ org.projectlombok
+ lombok
+ provided
+
+
+
+
+ org.apache.commons
+ commons-lang3
+ 3.14.0
+
+
+
+
+ org.springframework.boot
+ spring-boot-starter-logging
+
+
+
+
+
+
+ org.springframework.boot
+ spring-boot-maven-plugin
+ ${spring-boot.version}
+
+ false
+
+
+
+
+
\ No newline at end of file
diff --git a/tacit-gateway/src/main/java/com/tacit/gateway/GatewayApplication.java b/tacit-gateway/src/main/java/com/tacit/gateway/GatewayApplication.java
new file mode 100644
index 0000000..76f7e76
--- /dev/null
+++ b/tacit-gateway/src/main/java/com/tacit/gateway/GatewayApplication.java
@@ -0,0 +1,13 @@
+package com.tacit.gateway;
+
+import org.springframework.boot.SpringApplication;
+import org.springframework.boot.autoconfigure.SpringBootApplication;
+import org.springframework.cloud.client.discovery.EnableDiscoveryClient;
+
+@SpringBootApplication
+@EnableDiscoveryClient
+public class GatewayApplication {
+ public static void main(String[] args) {
+ SpringApplication.run(GatewayApplication.class, args);
+ }
+}
diff --git a/tacit-gateway/src/main/java/com/tacit/gateway/filter/JwtAuthenticationFilter.java b/tacit-gateway/src/main/java/com/tacit/gateway/filter/JwtAuthenticationFilter.java
new file mode 100644
index 0000000..cf0b9c6
--- /dev/null
+++ b/tacit-gateway/src/main/java/com/tacit/gateway/filter/JwtAuthenticationFilter.java
@@ -0,0 +1,104 @@
+package com.tacit.gateway.filter;
+
+import com.tacit.common.constant.CommonConstant;
+import com.tacit.common.utils.JwtUtils;
+import lombok.extern.slf4j.Slf4j;
+import org.apache.commons.lang3.StringUtils;
+import org.springframework.cloud.gateway.filter.GatewayFilterChain;
+import org.springframework.cloud.gateway.filter.GlobalFilter;
+import org.springframework.core.Ordered;
+import org.springframework.http.HttpHeaders;
+import org.springframework.http.HttpStatus;
+import org.springframework.http.server.reactive.ServerHttpRequest;
+import org.springframework.http.server.reactive.ServerHttpResponse;
+import org.springframework.stereotype.Component;
+import org.springframework.web.server.ServerWebExchange;
+import reactor.core.publisher.Mono;
+
+import java.util.List;
+
+@Component
+@Slf4j
+public class JwtAuthenticationFilter implements GlobalFilter, Ordered {
+
+ // 不需要认证的路径
+ private static final List WHITE_LIST = List.of(
+ "/api/auth/login",
+ "/api/auth/register",
+ "/swagger-ui",
+ "/v3/api-docs"
+ );
+
+ @Override
+ public Mono filter(ServerWebExchange exchange, GatewayFilterChain chain) {
+ ServerHttpRequest request = exchange.getRequest();
+ String path = request.getURI().getPath();
+
+ // 检查是否在白名单中
+ if (isWhiteList(path)) {
+ return chain.filter(exchange);
+ }
+
+ // 获取Authorization头
+ HttpHeaders headers = request.getHeaders();
+ String authorization = headers.getFirst(HttpHeaders.AUTHORIZATION);
+
+ // 检查Authorization头是否存在
+ if (StringUtils.isBlank(authorization)) {
+ return unauthorizedResponse(exchange, "缺少认证令牌");
+ }
+
+ // 检查Authorization头格式
+ if (!authorization.startsWith(CommonConstant.JWT_PREFIX)) {
+ return unauthorizedResponse(exchange, "认证令牌格式错误");
+ }
+
+ // 提取JWT令牌
+ String token = authorization.substring(CommonConstant.JWT_PREFIX.length());
+
+ // 验证JWT令牌
+ try {
+ JwtUtils.validateToken(token);
+
+ // 从令牌中获取用户信息并添加到请求头
+ Long userId = JwtUtils.getUserIdFromToken(token);
+ String username = JwtUtils.getUsernameFromToken(token);
+ String role = JwtUtils.getRoleFromToken(token);
+
+ // 将用户信息添加到请求头
+ ServerHttpRequest mutatedRequest = request.mutate()
+ .header("X-User-Id", String.valueOf(userId))
+ .header("X-Username", username)
+ .header("X-Role", role)
+ .build();
+
+ return chain.filter(exchange.mutate().request(mutatedRequest).build());
+ } catch (Exception e) {
+ log.error("JWT认证失败: {}", e.getMessage());
+ return unauthorizedResponse(exchange, e.getMessage());
+ }
+ }
+
+ /**
+ * 检查路径是否在白名单中
+ */
+ private boolean isWhiteList(String path) {
+ return WHITE_LIST.stream().anyMatch(path::startsWith);
+ }
+
+ /**
+ * 返回未授权响应
+ */
+ private Mono unauthorizedResponse(ServerWebExchange exchange, String message) {
+ ServerHttpResponse response = exchange.getResponse();
+ response.setStatusCode(HttpStatus.UNAUTHORIZED);
+ response.getHeaders().add(HttpHeaders.CONTENT_TYPE, "application/json");
+ String responseBody = String.format("{\"code\": 401, \"message\": \"%s\"}", message);
+ return response.writeWith(Mono.just(response.bufferFactory().wrap(responseBody.getBytes())));
+ }
+
+ @Override
+ public int getOrder() {
+ return -100;
+ }
+}
diff --git a/tacit-gateway/src/main/resources/application-dev.yml b/tacit-gateway/src/main/resources/application-dev.yml
new file mode 100644
index 0000000..df67938
--- /dev/null
+++ b/tacit-gateway/src/main/resources/application-dev.yml
@@ -0,0 +1,50 @@
+server:
+ port: 8080
+
+spring:
+ cloud:
+ gateway:
+ discovery:
+ locator:
+ enabled: true
+ lower-case-service-id: true
+ routes:
+ # Admin Service Route
+ - id: tacit-admin
+ uri: lb://tacit-admin
+ predicates:
+ - Path=/admin/**
+ filters:
+ - StripPrefix=1
+
+ # App API Service Route
+ - id: tacit-app-api
+ uri: lb://tacit-app-api
+ predicates:
+ - Path=/api/**
+ filters:
+ - StripPrefix=1
+ - JwtAuthenticationFilter
+
+ # Swagger UI Routes
+ - id: swagger-admin
+ uri: lb://tacit-admin
+ predicates:
+ - Path=/swagger-admin/**
+ filters:
+ - StripPrefix=1
+
+ - id: swagger-app-api
+ uri: lb://tacit-app-api
+ predicates:
+ - Path=/swagger-app-api/**
+ filters:
+ - StripPrefix=1
+
+# Logging Configuration
+logging:
+ level:
+ org.springframework.cloud.gateway: debug
+ org.springframework.http.server.reactive: debug
+ org.springframework.web.reactive: debug
+ reactor.netty: debug
diff --git a/tacit-gateway/src/main/resources/bootstrap.yml b/tacit-gateway/src/main/resources/bootstrap.yml
new file mode 100644
index 0000000..0df105b
--- /dev/null
+++ b/tacit-gateway/src/main/resources/bootstrap.yml
@@ -0,0 +1,16 @@
+spring:
+ application:
+ name: tacit-gateway
+ cloud:
+ nacos:
+ discovery:
+ server-addr: localhost:8848
+ namespace: public
+ config:
+ server-addr: localhost:8848
+ namespace: public
+ file-extension: yml
+ group: DEFAULT_GROUP
+ refresh-enabled: true
+ profiles:
+ active: dev
diff --git a/tacit-gateway/target/classes/application-dev.yml b/tacit-gateway/target/classes/application-dev.yml
new file mode 100644
index 0000000..df67938
--- /dev/null
+++ b/tacit-gateway/target/classes/application-dev.yml
@@ -0,0 +1,50 @@
+server:
+ port: 8080
+
+spring:
+ cloud:
+ gateway:
+ discovery:
+ locator:
+ enabled: true
+ lower-case-service-id: true
+ routes:
+ # Admin Service Route
+ - id: tacit-admin
+ uri: lb://tacit-admin
+ predicates:
+ - Path=/admin/**
+ filters:
+ - StripPrefix=1
+
+ # App API Service Route
+ - id: tacit-app-api
+ uri: lb://tacit-app-api
+ predicates:
+ - Path=/api/**
+ filters:
+ - StripPrefix=1
+ - JwtAuthenticationFilter
+
+ # Swagger UI Routes
+ - id: swagger-admin
+ uri: lb://tacit-admin
+ predicates:
+ - Path=/swagger-admin/**
+ filters:
+ - StripPrefix=1
+
+ - id: swagger-app-api
+ uri: lb://tacit-app-api
+ predicates:
+ - Path=/swagger-app-api/**
+ filters:
+ - StripPrefix=1
+
+# Logging Configuration
+logging:
+ level:
+ org.springframework.cloud.gateway: debug
+ org.springframework.http.server.reactive: debug
+ org.springframework.web.reactive: debug
+ reactor.netty: debug
diff --git a/tacit-gateway/target/classes/bootstrap.yml b/tacit-gateway/target/classes/bootstrap.yml
new file mode 100644
index 0000000..0df105b
--- /dev/null
+++ b/tacit-gateway/target/classes/bootstrap.yml
@@ -0,0 +1,16 @@
+spring:
+ application:
+ name: tacit-gateway
+ cloud:
+ nacos:
+ discovery:
+ server-addr: localhost:8848
+ namespace: public
+ config:
+ server-addr: localhost:8848
+ namespace: public
+ file-extension: yml
+ group: DEFAULT_GROUP
+ refresh-enabled: true
+ profiles:
+ active: dev
diff --git a/tacit-gateway/target/classes/com/tacit/gateway/GatewayApplication.class b/tacit-gateway/target/classes/com/tacit/gateway/GatewayApplication.class
new file mode 100644
index 0000000000000000000000000000000000000000..860313ea582b5c9b2e513282943acc4c1b76bb83
GIT binary patch
literal 787
zcma)4&rcLF6#lv_%(9Gvi-P#$U}DU&2Yd6fh6GmdGSS2}>%mi}TgKu{yXka5{wz-r
z5B>rEQH0k4!z9kZ9^Om8ukUO7z4zzp*KYv(c-}_`OA)#;ma)RHaUxCy&xOhO$Mi%=
z&#>}V8}0WPmWI2t2t9_E(iYqcsXfnxS7+j!zrV@*i$$)b@Y;v#1;K$HGju0*t{B!6ZPbUVNR|5>&N2)VD@8sNPKW(1*!ACZ$?z)q9|wYZ
zAvFDDYuNVi8S%npq_^2ZGxVpna#9`X@SN>`9ey3$Vc7Xp8Lta9)1?l-G{*Y610=lH
zYEEstsJtbYYIoFa6Aq{!4VUNx2dx4!x7D1>Tr1=GT$j?GDtFEgO|a_S-~FWK$9RE=
zhAgZOSQs;k>$KyP8Rg~C1=!D;-k=z0U=q0z$@wh8axaUFN?gmO6hl=3s+8glK`IsgCw
literal 0
HcmV?d00001
diff --git a/tacit-gateway/target/classes/com/tacit/gateway/filter/JwtAuthenticationFilter.class b/tacit-gateway/target/classes/com/tacit/gateway/filter/JwtAuthenticationFilter.class
new file mode 100644
index 0000000000000000000000000000000000000000..517184763c41be480c2a2aee56d95eb8e9328ff6
GIT binary patch
literal 6979
zcmd5>d3+pY8GgRaF`Lb_O_yGqLP^tuq-~fUK_Dqdw^ss5TbeYXtsIlxNiywbXPKQ%
zD2RySfpQ8SAS!54QKSbLl2Y&%MZ7P(Q7J9riT45cd^3~H&~B1i|FQl3W@f+R{oeO^
z&+pBXFCTauz$#H6K?p?(idB@LRG?yq-mhyZJ>8>i?Al=@9D&l6X4-Vl6)38y?I=eW
zWeOrH%ApD@wd@`(o3YJwPq(f283UHRQyVb4w5(zG8@ATwzB-MrwO1y3Nz@RC^cc=&
zQAit(#*xMdreV5*87gLCmVg?Z6i~QtlkW5iOdHwg!q?_VRJgekvlX1I;uOpw
zUFbM%DiXg#`P4CuSGZZqW&stX33RXL~ENIPaicT6k2&K(yhH?y6+ren0260zwu
z9&^DnYPXf63Ud`ytC)xR0*!@$NTjS>^5|37drWv|t?t#$G?DN)61b?QpmN63Z)0tX
zt1rve5|(XfnOs-O%=S{gRx53}3R|e+G}L&8&}8UI!_ErSjAsZ^<^IY>1&ajc7n0Al
znZVL8mIzFem|C`Zl?!PEwK!dchNS{w>TR8AOH3CQ!t_{}BUp|V3hGsyf!Fv<=ovlH
zYf#p{J}aGd9cP8+seX%NrYMjZZ^zgw0hxXof
z