Question

我试图从“ServiceA”调用“ServiceB”，这两个服务都是资源服务器，我试图通过“Feign Client和OAuth2 toke”进行这个内部服务调用，这对于下面的bean实现工作正常在Configuration类中：

@Bean    
public RequestInterceptor requestTokenBearerInterceptor() {

    return new RequestInterceptor() {

        @Override
        public void apply(RequestTemplate requestTemplate) {

            OAuth2AuthenticationDetails details = (OAuth2AuthenticationDetails)

            SecurityContextHolder.getContext().getAuthentication()
                    .getDetails();

            requestTemplate.header("Authorization",
                    "bearer " + details.getTokenValue());

        }

    };

}

当我尝试使用带有后备的Feign客户端时，即没有OAuth令牌的Hystrix（即，当没有任何服务是资源服务器时）也正常工作。

但是在尝试使用其中的三个（即Feignclient，Hystrix和OAuth2）时，它们都无法正常工作。虽然所有服务都已启动并运行，但每次都要使用回退方法。

以下是我的代码：

App.java

import org.json.simple.JSONObject;
import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.boot.SpringApplication;
import org.springframework.boot.autoconfigure.SpringBootApplication;
import org.springframework.cloud.client.circuitbreaker.EnableCircuitBreaker;
import org.springframework.cloud.netflix.eureka.EnableEurekaClient;
import org.springframework.cloud.netflix.feign.EnableFeignClients;
import org.springframework.context.annotation.Bean;
import org.springframework.security.core.context.SecurityContextHolder;
import        org.springframework.security.oauth2.provider.authentication.OAuth2AuthenticationDetails;
import org.springframework.web.bind.annotation.RequestBody;
import org.springframework.web.bind.annotation.RequestMapping;
import org.springframework.web.bind.annotation.RequestMethod;
import org.springframework.web.bind.annotation.RestController;

import feign.RequestInterceptor;
import feign.RequestTemplate;


@SpringBootApplication
@RestController
@EnableFeignClients
@EnableEurekaClient
@EnableCircuitBreaker
public class App 
{

/*@Autowired
@Qualifier("abc")
private GitHubClient gitHub;*/
@Autowired
private CallService callService;
public static void main( String[] args )
{
    SpringApplication.run(App.class, args);
}
    @RequestMapping(value="/feign",method=RequestMethod.POST,consumes="application/json")
public String contributors1(@RequestBody JSONObject payLoad) {
        String callservice2 = callService.callservice(payLoad);
        return callservice2;
}

@Bean
public RequestInterceptor requestTokenBearerInterceptor() {

    return new RequestInterceptor() {

        @Override
        public void apply(RequestTemplate requestTemplate) {

            OAuth2AuthenticationDetails details = (OAuth2AuthenticationDetails)

            SecurityContextHolder.getContext().getAuthentication()
                    .getDetails();

            requestTemplate.header("Authorization",
                    "bearer " + details.getTokenValue());

        }

    };

}



}

Callervice.java

import org.json.simple.JSONObject;
import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.beans.factory.annotation.Qualifier;
import org.springframework.stereotype.Service;

@Service
public class CallService {


@Autowired
@Qualifier("abc")
private GitHubClient gitHub;

public String callservice(JSONObject payLoad){
    String forObject =gitHub.contributors(payLoad);
    return forObject;
}

}

HystrixWrappedClient.java

import org.json.simple.JSONObject;
import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.beans.factory.annotation.Qualifier;
import org.springframework.stereotype.Component;

import com.netflix.hystrix.contrib.javanica.annotation.HystrixCommand;

@Component("abc")
public class HystrixWrappedClient implements GitHubClient{

@Autowired
@Qualifier("gitHubClient")
private GitHubClient gitHub;

@Override
@HystrixCommand(fallbackMethod="failure")
public String contributors(JSONObject payLoad) {
    return gitHub.contributors(payLoad);
}

public String failure(JSONObject payLoad){
    System.out.println(payLoad);
    return "Failure";
}
}

GitHubClient.java

import org.json.simple.JSONObject;
import org.springframework.cloud.netflix.feign.FeignClient;
import org.springframework.web.bind.annotation.RequestBody;
import org.springframework.web.bind.annotation.RequestMapping;
import org.springframework.web.bind.annotation.RequestMethod;

@FeignClient("MockRestService")
interface GitHubClient {


@RequestMapping(method = RequestMethod.POST, value =     "/test",consumes="application/json")
String contributors(@RequestBody JSONObject payLoad);

}

的pom.xml

<parent>
    <groupId>org.springframework.boot</groupId>
    <artifactId>spring-boot-starter-parent</artifactId>
    <version>1.2.5.RELEASE</version>
</parent>


<dependencies>
    <dependency>
        <groupId>com.googlecode.json-simple</groupId>
        <artifactId>json-simple</artifactId>
        <version>1.1.1</version>
    </dependency>
    <dependency>
        <groupId>org.springframework.cloud</groupId>
        <artifactId>spring-cloud-config-client</artifactId>
        <version>1.0.0.RELEASE</version>
    </dependency>
    <dependency>
        <groupId>org.springframework.boot</groupId>
        <artifactId>spring-boot-starter-actuator</artifactId>
    </dependency>
    <dependency>
        <groupId>org.springframework.cloud</groupId>
        <artifactId>spring-cloud-starter-eureka</artifactId>
        <version>1.0.1.RELEASE</version>
    </dependency>
    <!-- For swagger documenation -->
    <dependency>
        <groupId>com.mangofactory</groupId>
        <artifactId>swagger-springmvc</artifactId>
        <version>1.0.2</version>
    </dependency>
    <dependency>
        <groupId>org.springframework.cloud</groupId>
        <artifactId>spring-cloud-starter-security</artifactId>
    </dependency>

    <dependency>
        <groupId>org.springframework.cloud</groupId>
        <artifactId>spring-cloud-starter-hystrix</artifactId>
    </dependency>
    <dependency>
        <groupId>org.springframework.security.oauth</groupId>
        <artifactId>spring-security-oauth2</artifactId>
    </dependency>

    <!-- NEW -->
    <dependency>
        <groupId>org.springframework.cloud</groupId>
        <artifactId>spring-cloud-starter-feign</artifactId>
    </dependency>


</dependencies>
<dependencyManagement>
    <dependencies>
        <dependency>
            <groupId>org.springframework.cloud</groupId>
            <artifactId>spring-cloud-starter-parent</artifactId>
            <version>1.0.1.RELEASE</version>
            <type>pom</type>
            <scope>import</scope>
        </dependency>
    </dependencies>
</dependencyManagement>

请建议。每当尝试使用Feignclient，OAuth2和Hystrix时，它总是会使用Fallback方法。

Answer 1

你可以调查这个http://kodgemisi.com/2017/02/use-securitycontext-feign-requestinterceptor/ Hystrix在另一个/不同的线程中执行，通过HystrixRequestVariableDefault转移您的安全上下文

Answer 2

您是否以某种方式与Hystrix共享了Spring Security上下文？

由于 Spring Cloud Netflix 1.2.0 ，您可以使用ie config param启用与Hystrix的安全上下文共享

hystrix.shareSecurityContext: true

试图在假装客户端和hystrix中使用Oauth2令牌

2 个答案: