修改spring boot actuator未授权漏洞

yangyuxia · Sep 30, 2024 · 7b615d3 · 7b615d3
1 parent 9508e99
commit 7b615d3
Show file tree

Hide file tree

Showing 3 changed files with 14 additions and 0 deletions.
diff --git a/waggle-dance-api/pom.xml b/waggle-dance-api/pom.xml
@@ -29,6 +29,10 @@
       <groupId>org.springframework.boot</groupId>
       <artifactId>spring-boot-starter-actuator</artifactId>
     </dependency>
+    <dependency>
+      <groupId>org.springframework.boot</groupId>
+      <artifactId>spring-boot-starter-security</artifactId>
+    </dependency>
     <dependency>
       <groupId>org.springframework.boot</groupId>
       <artifactId>spring-boot</artifactId>

diff --git a/waggle-dance-core/pom.xml b/waggle-dance-core/pom.xml
@@ -58,6 +58,10 @@
       <groupId>org.springframework.boot</groupId>
       <artifactId>spring-boot-starter-actuator</artifactId>
     </dependency>
+    <dependency>
+      <groupId>org.springframework.boot</groupId>
+      <artifactId>spring-boot-starter-security</artifactId>
+    </dependency>
     <dependency>
       <groupId>org.springframework.boot</groupId>
       <artifactId>spring-boot-actuator</artifactId>

diff --git a/waggle-dance/src/main/resources/waggle-dance-server.yml.template b/waggle-dance/src/main/resources/waggle-dance-server.yml.template
@@ -1 +1,7 @@
 verbose: true
+port: 48869
+endpoint.port: 18000
+management.security.enabled: true
+security.user.name: admin
+security.user.password: admin
+management.endpoints.web.exposure.include: health,info,metrics,prometheus